I am using Karaf 2.2.9.

I have a jaas:config setup in a blueprint file.  I defined the ssl.protocol,
the ssl.truststore, and the ssl.algorithm.  

ssl.protocol=SSL
ssl.truststore=ks
ssl.algorithm=PKIX

I also defined a jaas:keystore like this:

<jaas:keystore name="ks" path="file:///myTruststore.jks"
keystorePassword="myPassword" />

When I attempt to login to the Karaf web console, it gets this error: Unable
to setup SSL support for LDAP: Unable to lookup configured keystore and/or
truststore
   at
org.apache.karaf.jaas.modules.ldap.LDAPLoginModule.setupSsl(LDAPLoginModule.java:284)

I followed through the code and line 280 of the LDAPLoginModule is this:
manager.createSSLFactory(sslProvider, sslProtocol, sslAlgorithm,
sslKeystore, sslKeyAlias, sslTrustStore);
It doesn't send in a timeout to the createSSLFactory method.  Because of
this another createSSLFactory is called with a timeout of 0 in line 106 of
OsgiKeystoreManager.  And because of that line 132 of OsgiKeystoreManager
will always return without giving the truststore a chance to be set.  Then
line 71 always gets hit throwing the security exception.

Is this an issue, or am I missing how I should really be setting the
truststore?  

Thanks!





--
View this message in context: 
http://karaf.922171.n3.nabble.com/JAAS-SSL-Issue-LDAPLoginModule-setupSsl-calls-OsgiKeystoreManager-createSSLFactory-with-timestamp-of0-tp4026149.html
Sent from the Karaf - User mailing list archive at Nabble.com.

Reply via email to