Use Server Cert in Managed server not working

Question

I am using WebLogic 10.3.3 for a managed server with a jks keystore and jrockit cacert as the Custom Identity and Java Standard Trust. I have the FQDN as the alias for the server in the keystore. Under Advanced, I have checked Use Server Cert so outgoing web service calls from my deployed application will use the server cert as its identifier. I have used this configuration before, but it is not working this time.
At first, there were some weird Unsupported OID messages when loading the cacerts, but I was able to clear those messages up. Now, when the managed server comes up, the keystore and cacert file load without error, but the outgoing calls do NOT have the certificate included.
I have no failures regarding the certificates in any of the output files. I have tried two separate keystore files without change. Any help would be appreciated.

Answer 1

You can re-create the SSL handshake with a command line java app that uses the same keystores. Is it possible that the service you're invoking is no longer requesting the client cert?
The command line uses a linux script and a java app:
--- linux script:
#!/bin/sh
CLIENT_KEYSTORE="full path to your server's identity keystore"
TRUST_STORE=$JAVA_HOME/jre/lib/security/cacerts
echo "Make sure you're using the right trust store..."
echo $TRUST_STORE
echo
echo "Enter trust store password"
read -s trustpass
echo
echo "Enter client keystore password for $CLIENT_KEYSTORE"
read -s keypass
SSL_OPTIONS="-Djavax.net.ssl.trustStore=$TRUST_STORE "
SSL_OPTIONS="$SSL_OPTIONS -Djavax.net.ssl.trustStorePassword=$trustpass "
SSL_OPTIONS="$SSL_OPTIONS -Dssl.debug=true -Dweblogic.StdoutDebugEnabled=true "
SSL_OPTIONS="$SSL_OPTIONS -Djavax.net.debug=ssl,handshake,verbose "
SSL_OPTIONS="$SSL_OPTIONS -Djavax.net.ssl.keyStore=$CLIENT_KEYSTORE "
SSL_OPTIONS="$SSL_OPTIONS -Djavax.net.ssl.keyStorePassword=$keypass "
javac SSL_Test.java
java -D $SSL_OPTIONS SSL_Test > client_ssl.out
---- java source:
import java.net.*;
import java.io.*;
public class SSL_Test {
public static void main(String[] args) throws Exception {
// https://someserver.net:999/someservice?wsdl
URL verisign = new URL( "address of the wsdl" );
System.out.println( "Opening URL: " + verisign.toString() ) ;
BufferedReader in = new BufferedReader(
new InputStreamReader(
verisign.openStream()));
String inputLine;
while ((inputLine = in.readLine()) != null)
System.out.println(inputLine);
in.close();
to run this, just run the commEnv.sh script to set up your java and then run the script.
This has been very useful to me in the past in diagnosing ssl connectivity issues.