Link to home
Start Free TrialLog in
Avatar of brachid
brachid

asked on

Issues with SHA-2 certificate on Web sphere 6.0

Hello,

I coud'nt make WAS 6.0 read my sha-2 certificate.
WAS is configured with "global security" option, I import the certificate to the "DummyTrustFile" of cell and node using jdk1.5 keytool 'cause with native keytool it's not possible, the algorithm is not recognized. I also put the certificate on "cacerts" but no chance to have WAS recognized it.
I've added "gnu-crypto" jars and make changes on java.security but no chance.
I've tested on separate jdk1.4.08 and it works fine and quickly by importing the certificate using recent keytool and the program works.

Any help please to configure this on WAS 6.0

Rachid,
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of btan
btan

i also noticed that there is past issue pertaining to SHA-256 algorithm is provided by IBMJCE provider in IBMJDK, which is not included in the temporary security providers list used during JAR verification. The defect is fixed in 6.0.0 SR12 and 6.0.1 SR4

[IV25042] Error Message: Command "jarsigner -verify <JAR signed using SHA-256>" will give "jar is unsigned" message.