Layer 7 Identity Management

Expand all | Collapse all

Identity Portal - Keystore file

Jump to Best Answer
  • 1.  Identity Portal - Keystore file

    Posted 07-31-2019 02:07 AM
    Hi Team,
    CA Identity Suite 14.3
    In my Identity Portal, i need to create a self service custom form that will query a 3rd party LDAP server using LDAPS(port:636).
    In this case, how can i install server certificate into Identity Portal ?
    (As i understand, if i want to connect Ldaps(636), i need to install that server cert)

    I can't find any keystore file in Identity Portal. Can anyone advice ?

    regards,
    William


  • 2.  RE: Identity Portal - Keystore file
    Best Answer

    Posted 07-31-2019 11:16 AM
    sigma.encryption.keystoreLocation

    sigma.keystore path;

    e.g.

    /IdentityPortal/sigma-keystore-tool/sigma.keystore


    https://docops.ca.com/ca-identity-portal/14-2/en/upgrading/upgrading-ca-identity-portal/update-the-jvm-arguments

    ------------------------------
    Best regards,

    Scott Owens
    Sr Support Engineer
    Enterprise Software Division
    Broadcom Inc.
    ------------------------------



  • 3.  RE: Identity Portal - Keystore file

    Posted 07-31-2019 07:32 PM
    thanks Scott, the keystore seem to be password protected, do u know the standard password ?


  • 4.  RE: Identity Portal - Keystore file

    Posted 07-31-2019 09:46 PM
    Try changeme


  • 5.  RE: Identity Portal - Keystore file

    Posted 08-07-2019 06:53 AM
    Edited by William Cheang 08-07-2019 06:55 AM
    i tried with keytool command to import my server cert but i got the error File Format not recognize and based on the description 
    'sigma.encryption.keystoreLocation", the keystore file is encrypted. That's why the keytool can't work.

    sigma.keystore: Java JCE Keystore

    How can i import my server cert to a encrypted keystore ?




  • 6.  RE: Identity Portal - Keystore file

    Posted 08-07-2019 07:42 AM
    The reason why i asked for keystore file for Identity Portal is because am writing a portal plugins that will query a LDAPS(port 636) server instead of normal LDAP(389) server.

    and am gettting the error "Simple Bind failed"
    Root exception is ... PKIX path building failed.... SunCertPathBuilderException: unable to find valid certification path to request target


  • 7.  RE: Identity Portal - Keystore file

    Posted 08-07-2019 09:24 AM
    If you are using the vApp, it should be $JAVA_HOME/jre/lib/security/cacerts


  • 8.  RE: Identity Portal - Keystore file

    Posted 08-07-2019 09:28 PM
    thanks Lyes, i will try it.