NCEAS / ezid

Implementation of the EZID identifier services in a Java library
Other
4 stars 4 forks source link

document SSL certificate configuration #2

Open mbjones opened 11 years ago

mbjones commented 11 years ago

When n2t.net changed its SSL certificate, it no longer became trusted by Java by default. To make the ezid library work, one has to configure java to recognize the new SSL certificate. We need to document this process in the library configuration. Greg Janée describes the issues from an email thread:

Anyway, I downloaded this Java client and found two problems. First, Java (even Java 7) does not recognize n2t.net's new SSL certificate, hence the "peer not authenticated" errors. To correct this, 1) download n2t.net's certificate, 2) create a local truststore and insert the certificate in the truststore, and 3) run the test again. To download n2t.net's certificate, follow the instructions in this message sent on the EZID list: http://listserv.ucop.edu/cgi-bin/wa.exe?A2=ind1307E&L=EZID-L&F=&S=&P=1524. To create a local truststore, I did this:

% keytool -import -file certificateFile.crt -keystore keystore.ks

To rerun Maven and recognize the new truststore, I did this:

% mvn -Djavax.net.ssl.trustStore=keystore.ks package