search

WASdev / ci.docker.websphere-traditional

Dockerfiles for WebSphere Application Server traditional
Apache License 2.0
171 stars 192 forks source link

SSL signer from target host 127.0.0.1 is not found in trust store #282

Closed shalom938 closed 1 year ago

shalom938 commented 1 year ago

I'm doing automated testing with was9 and was8.5 , using docker.io/ibmcom/websphere-traditional:9.0.5.13 and docker.io/ibmcom/websphere-traditional:8.5.5.21 running an ejb application with jpa, in both i'm running wsadmin to configure and deploy the app, but wsadmin prompts to accept signer, that breaks the automation. I tried various ways to get over that, also to change com.ibm.ssl.enableSignerExchangePrompt=false, but when i do that other things like jndi lookup don't work.

what can i do to bypass this prompt?

 /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/bin/wsadmin.sh -user wsadmin -password password -f /work/install-app.py meeting-organizer-ear /root/vf/agent-test/build/test-runner/deployments/meeting-organizer.ear server1

*** SSL SIGNER EXCHANGE PROMPT ***
SSL signer from target host 127.0.0.1 is not found in trust store /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/etc/trust.p12.

Here is the signer information (verify the digest value matches what is displayed at the server): 

Subject DN:    CN=localhost, OU=DefaultCell01, OU=DefaultNode01, O=IBM, C=US
Issuer DN:     CN=localhost, OU=Root Certificate, OU=DefaultCell01, OU=DefaultNode01, O=IBM, C=US
Serial number: 146178455010046
Expires:       Thu Jan 25 01:54:38 UTC 2024
SHA-1 Digest:  1E:19:99:59:90:DF:D1:B9:65:E1:FE:04:72:12:DD:E7:7D:12:FF:9A
MD5 Digest:    86:6C:13:74:ED:17:23:B5:E2:F9:79:3B:D2:9B:F5:D9

Subject DN:    CN=localhost, OU=Root Certificate, OU=DefaultCell01, OU=DefaultNode01, O=IBM, C=US
Issuer DN:     CN=localhost, OU=Root Certificate, OU=DefaultCell01, OU=DefaultNode01, O=IBM, C=US
Serial number: 146176361549536
Expires:       Thu Jan 21 01:54:35 UTC 2038
SHA-1 Digest:  1E:19:99:59:90:DF:D1:B9:65:E1:FE:04:72:12:DD:E7:7D:12:FF:9A
MD5 Digest:    86:6C:13:74:ED:17:23:B5:E2:F9:79:3B:D2:9B:F5:D9

Add signer to the trust store now? (y/n)
shalom938 commented 1 year ago

We don't call configure.sh in out image, that;s why i had this issue. now i added the call to retrieveSigners.sh and set_keystore_password.sh and it ok now.