wood burning stoves 2.0*
The moose likes Websphere and the fly likes ws-security certificate expiration warning in web sphere application server Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of The Java EE 7 Tutorial Volume 1 or Volume 2 this week in the Java EE forum
or jQuery UI in Action in the JavaScript forum!
JavaRanch » Java Forums » Products » Websphere
Bookmark "ws-security certificate expiration warning in web sphere application server" Watch "ws-security certificate expiration warning in web sphere application server" New topic
Author

ws-security certificate expiration warning in web sphere application server

Murugesan Narayanasamy
Greenhorn

Joined: May 01, 2007
Posts: 8
Dear friends,
I am new to web service. I could find a warning message in my production environment AIX, Web Sphere 5.1. Please help me to solve this issue.

============================================================================================================
[7/14/11 5:12:36:282 GMT+08:00] 28efcd65 KeyStoreKeyLo W WSEC5189W: The certificate (Owner: "EMAILADDRESS=maruyama@jp.ibm.com, CN=SOAP 2.1 Test CA, OU=TRL, O=IBM, L=Yamato, ST=Kanagawa, C=JP") with alias "soapca" from keyStore "/usr/was51/AppServer/etc/ws-security/samples/dsig-sender.ks" will be expired in 43 days
============================================================================================================

Thanks in advance,
Murugesh.


Murugesh,<br />Thanks.
Anant Rao
Ranch Hand

Joined: Nov 12, 2004
Posts: 126
Looks like the certificate (Owner: "EMAILADDRESS=maruyama@jp.ibm.com, CN=SOAP 2.1 Test CA, OU=TRL, O=IBM, L=Yamato, ST=Kanagawa, C=JP") with alias "soapca" in keyStore "/usr/was51/AppServer/etc/ws-security/samples/dsig-sender.ks" is going to expire in 43 days.

You may have to generate new or renew. Here is a blog on renewing certificates

http://enerosweb.wordpress.com/2010/10/12/renew-certificate-in-websphere-keystore-while-retaining-same-alias/

Thanks
Anant
Murugesan Narayanasamy
Greenhorn

Joined: May 01, 2007
Posts: 8
Dear Anant,

Thank you for your reply.

I checked the mentioned blog. It seems we need to buy a new certificate and import it in the keystore. Prior to this, I would like to confirm whether "we are using this keystore and it's certificate is going to expire" or "we are not at all using this keystore and it is a general warning for keystores across websphere components"

Please help me to identify whether we are using this keystore or not. Where can I check and confirm this in websphere.

And also, if you find any document for renewing this certificate in AIX sever, please share it with here.

Thanks in advance.

Thanks,
Murugesh.
Murugesan Narayanasamy
Greenhorn

Joined: May 01, 2007
Posts: 8
Dear Friends,
Here are the following steps that I did to ensure the keystore ussage.

1.Traced the soap message and printed it. It clearly says there is no authentication header information present in the soap message.
2.Moved the keystore file to a backup location. We were able to call the webservice without any issue.

If anyone know how to disable that warning in websphere, please share it.

Thanks,
Murugesh.
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: ws-security certificate expiration warning in web sphere application server