0

We needed to consume MOSS out of the box web services hosted on HTTPS protocol from a Java application running on WebLogic server. Do we need to import SSL certificate of the MOSS website into WebLogic server or can we simply bypass certificate validation? What is the best approach? We may need to support more than one web site as more MOSS web sites can be configured in future.

Thanks.

skaffman
  • 398,947
  • 96
  • 818
  • 769

2 Answers2

0

You can do that, or you can disable the SSL validation with a fake trust-manager. I think both subjects are described in this similar question:

Java client certificates over HTTPS/SSL

It can be a hassle to manage many SSL cerificates: expiration, changed domains, changed issuer ++ If SSL is not that important to you I say skip it

Community
  • 1
  • 1
Tommy
  • 4,011
  • 9
  • 37
  • 59
0

Not necessarily. Your java app will need to establish a chain of trust from the server cert to the JVM's own trusted CA certs. As long as a CA cert is available that starts that chain, you should be fine. If you self sign certs, you will need to add your signing CA to the java's keystore. You do not need to import every server's certificate. Just the trusted CA certificate that signed them all if it is not already trusted.

Import a root or intermediate CA certificate to an existing Java keystore:

keytool -import -trustcacerts -alias root -file Thawte.crt -keystore keystore.jks
Chris Nava
  • 6,614
  • 3
  • 25
  • 31