WLST over SSL

[Alex Ioannou]

Hi there

I have successfully executed a WLST script over an SSL connection to perform operations such as deploy/undeploy EAR files and configure resources. I imported the demo certificate from my BEA install into my client JVM to achieve this.

I now want to specify the keystore on the command line so I can run a script without having to modify the JVM first.

So I tried -Djavax.net.ssl.keyStore=C:/jdk15/cacerts which didn't work.

I'm running WLST using ant so I also tried this which didn't work either

  <java classname="weblogic.WLST" classpath="${weblogic.jar}" fork="true" maxmemory="256m" >
          <jvmarg value="-Djava.io.tmpdir=wlst"/>
          <jvmarg value="-Dwlst.properties=wlst.properties"/>
          <jvmarg value="-Dapplication.name=${target.application.name}"/>
  <jvmarg value="-Djavax.net.ssl.keyStore=c:/jdk15/cacerts"/>
  <jvmarg value="-Djavax.net.ssl.keyStore=changeit"/>  
          <arg value="wlst/undeploy.py"/>
        </java>

Here is the error (remember the code works fine when the certificate is added to the default location).

     javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://localhost:7002: Destination unreachable; nes
ted exception is:
     javax.net.ssl.SSLKeyException: [Security:090542]Certificate chain received from localhost - 127.0.0.1 was not trusted causing SS
L handshake failure. Check the certificate chain to determine if it should be trusted or not. If it should be trusted, then update the client tr
usted CA configuration to trust the CA certificate that signed the peer certificate chain. If you are connecting to a WLS server that is using d
emo certificates (the default WLS server behavior), and you want this client to trust demo certificates, then specify -Dweblogic.security.TrustK
eyStore=DemoTrust on the command line for this client.; No available router to destination]

Am I using the correct system properties?