Solved

Websphere SSL - Sharing Public Key

Posted on 2008-10-14
4
738 Views
Last Modified: 2013-12-11
Hi,

I am in  urgent need of a solution. Request your help.

I am using JSCH API to FTP documents to a third party site.  I am able to connect to their site by supplying credentials but they have told us that they would not accept credentials but only Public key.

From the websphere console, I went to SSL Configuration tab, and under 'Manage End Points, from the outbound node, I configured to use the default self-signed certificate for the cell.

I am assuming that I should be sharing the 'serverCertificate.arm' file under etc folder to this third-party.


My question is: Will this setting enable my application to connect to the third-party server without me writing Custom SSLFactory?

Thanks




0
Comment
Question by:pattabi23in
  • 3
4 Comments
 
LVL 41

Accepted Solution

by:
HonorGod earned 500 total points
ID: 22721358
It depends.

From your description, it sounds like you have an application that executes on
your application server that initiates the connection to the third part site.  Is that correct?

If so, then, you need to extract the public portion of the certificate being used, and provide that to the third party.  Here is a page from the 6.1 documentation that discusses certificate management:

http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.base.doc/info/aes/ae/csec_sslcertmanadmin.html

On the other hand, if the request for an SSL connection comes from the third part site, then the "public" key that you need to share with the third party site should be that of your web server, not your application server.

Hopefully, this make sense to you.
0
 

Author Comment

by:pattabi23in
ID: 22721683
Thank you for the response. Yes, my application code executing on my App server is initiating the connection.
So my understanding from your response is that once I share the public portion of the key, Websphere (network layer?) will take care of handshake without any SSL specific changes in my code. Another application within our company is using SSL api to create SSLSocket factory and SSLContext - attached code snippet). I guess this is not required if I have this configuration setup through Admin console. Right?


Thanks  

   


code-snippet.txt
0
 
LVL 41

Expert Comment

by:HonorGod
ID: 22724891
Q: ... once I share the public portion of the key, Websphere
     will take care of handshake without any SSL specific changes in my code.
     Is this correct?

A: Yes

Q: Do we need to use an SSL API to do this?
A: I don't believe so, but I guess it depends upon how your code
    opens the connect to the destination.  That is an interesting question.
    I know that should an SSL connection from a remote application (e.g.,
    a browser) be established to the web server, the connection from the
    web server (i.e., the WebSphere plugin portion of the web server)
    doesn't have to use an SSL connection to connect to the application
    server (but it can).  Once the connection is established between the
    plugin and the application server, the WebContainer will route the
    request to the specific application in question, and that application
    does not know, nor should it care whether or not the data was
    sent over an SSL, or standard HTTP session.
0
 
LVL 41

Expert Comment

by:HonorGod
ID: 22724930
Thanks for the grade & points!

Good luck & have a great day
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question