Multiple cert for x509

Hi guys,
I have a requirement to use multiple x509 cert for the proxy service to do digital signature and encryption in ALSB 2.6.
The answer I came up is using a facade proxy service that uses some identification token from request (e.g. username/password) to forward to the right proxy service, each of which will have its own 'proxy service provider' set up to refer to the corresponding identity keystores set up in Weblogic Server.
As you can see, this is kind of tedious.
I was wandering if anyone has done something like these in a simpler way or if there is any features from ALSB 2.6 that could facilitate this process?
Thanks in advance
Sam

I think the only other way would be to embed the certificates in the WSDL. However I won't recommend this approach.
Gregory Haardt
ALSB Prg. Manager
[email protected]

Similar Messages

Multiple Certs for multiple domains on one server

Is it possible with WLS6 and WLCS3.5 to serve up multiple domains with their own certificates?
i.e. https://www.foo.com and https://www.bar.com on the same box.

Hi,
for one WebLogic Server you can only specify one certificate. So to achieve
this you will have
to use different WLS instances for your domains - which is possible on the
same box.
Kind Regards
Maria Salzberger
Developer Relations Engineer
BEA Support
Mike Berger schrieb in Nachricht <3c21f5c3$[email protected]>...
Is it possible with WLS6 and WLCS3.5 to serve up multiple domains withtheir own certificates?
i.e. https://www.foo.com and https://www.bar.com on the same box.

Multiple certs per VIP

Folks
I have a client who wants to install multiple certs for a same vip. So lets say for example there are 3 urls www.xxxx.com and www.yyy.com and www.zzz.com with vip 2.2.2.2 can they install multiple certs for url but same vip?
I think u can only apply one ssl-proxy server per policy map.

I'm afraid you're right. CLI allows one 'ssl-proxy server' line under policy-map---L3/L4class. Host header check is performed in L7 'policy-map type loadbalance' where you cannot insert that line.

Programmatically change management cert for multiple (600+) subscriptions

Our service has 600+ subscriptions, and they all share the same management cert.
Due to security reason, we would like to change management cert on the subscriptions periodically, but I have not yet found a way to do so programmatically.
I have found the "Add Service Certificate" cmdlet but it only allows you to upload the "Service certificate per service",
and I need to be able to change "Management cert" for all 600+ subscriptions.
Could you please tell me if there is a programmatic way to do so?

I'v just write a blog show how to use Managment class libraries.
You can refer to my
blog, or Download the
code sample I upload to MSDN and add the managment class libraries to your project.
Then Add Certificate like this:
ComputeManagementClient client = new ComputeManagementClient(cloudCredentials);
ServiceCertificateCreateParameters parm = new ServiceCertificateCreateParameters()
Data = certByte,//the certificate your want to add(convert to byte[] the certificate should be pfx )
CertificateFormat = CertificateFormat.Pfx,
Password="YouPassword"
var hostedServices = client.HostedServices.List();
foreach (var service in hostedServices)
client.ServiceCertificates.Create(service.ServiceName, parm);
Console.ReadLine();
Please mark post as answered if it helped!

Using keytool to generate self signed cert. for Microsft Certificate Mrg.

Hi All,
I want to be able to generate a self signed certificate that I can Import into
Microsoft's Certificate Manager, to enable an HTTPS Listener for
Microsoft's WinRM and WinRS.
The certificate would only be for internal use, not used externally.
Here's the problem. I can create a certificate using this (path obscured):
"C:\Program Files\.....\jre\bin\keytool" -genkey -al
ias dMobX -keyalg RSA -keysize 1024 -sigalg SHA1withRSA -dname "CN=your-f5c57803
53" -keypass changeit -validity 90 -storetype pkcs12 -keystore "C:\Program Files
\......\jre\lib\keystore\.keystore" -storepass changeit
"C:\Program Files\......\jre\bin\keytool" -export -alias dMob
X -file "C:\Program Files\......\jre\lib\keystore\dMobX.cer" -stor
etype pkcs12 -keystore "C:\Program Files\.......\jre\lib\keystore\.
keystore" -storepass changeit -v
Microsoft's Certificate Manager will accept it, the .cer, using "Import", into
Trusted Root Certification Authorities, but when I run the command to create the HTTPS Listener, I get this error message:
The WS-Management service cannot find the certificate that was requested.
If I use another tool, like selfssl, I can generate a self signed certificate using:
selfssl /N:CN=your-f5c5780353 /K:1024 /V:90 /P:443 /T
This will populate a certificate in Trusted Root Certification Authorities,
and when I run the command to create the HTTPS Listener, it succeeds with
no problem.
So my question is, am I doing something wrong with keytool, or are there
extra steps that I need to take, or is it even capable of generating a "self signed
certificate" that will work in the above case?
There are some concepts involved, certificate wise, that I'm not sure about.
Do I need to create a CSR and use a tool like openssl, as a CA, and
use the resulting certificate?
I just want to be able to programmatically create the needed certificate using keytool, or
using an API.
Thanks,

Download the latest JDK on http://download.java.net/jdk7/binaries/.
Run "keytool -genkeypair -ext KU=? -ext EKU=? ...". Substitute the "?" with the usages you see in the other cert (for example, "digitalSignature" or "codeSigning". If there are multiple ones, separate with comma).

Ironport email appliance : can i use a wildcard cert for TLS ?

Hi all,
We have 2 ironport C170 email appliance. I would like to use a wildcard SSL Cert from Digicert for TLS communication. I have 2 questions about it :
1/ Is it possible to use wildcard certificat on ironport ?
2/ Is there any known problem with wildcard certificat for TLS use ?
I found 2 (old) post about that :
https://supportforums.cisco.com/discussion/10479161/tls-support-wildcard-cert
http://www.symantec.com/connect/forums/someone-wants-enforce-tls-us-and-use-wildcard-cert
Does someone has experience about it ?
Thanks.

My experience is that it works fine.
If you have multiple domains, you have to make sure that the MX records point to the A record of the box you have certs for.
eg. something like this:
mx domain1.com smtp.domain2.com
mx domain2.com smtp.domain2.com
a smtp.domain2.com x.x.x.x

Sun One 6.1 reverse proxy with multiple certs

We are using Sun One Web Server 6.1sp6 as a reverse proxy without the passthrough plugin. We also have multiple certs and not a global cert and what we are seeing is the data getting "staged" on the web server before moving on to the destination (which obviously halves throughput). Some research tells us that this staging is happening because it needs to re-encrypt the packets for the next cert.
Is there any way besides having a global cert that we can get around this? Would using the passthrough plugin help?
Thanks,
Don

The thing is that it apparently doesn't do it on the fly, which is why I was wondering if the passthrough plug in would help. In other words, if I am sending a 10mb file through to the destination server (there's a weblogic server on the back end with a different cert that I want to do the real processing), the web server waits until it gets all 10mb then resends it. Seems it should do the encrypt/decrypt on a packet level to me.
As far as the config, I didn't set it up, I'm just trying to get it to work :)
Here are the configs, if it would help. If there's something set up wrong here, please feel free to point it out!
Thanks,
Don
magnus.conf
# The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED.
# They will not be supported in future releases of the Web Server.
NetsiteRoot /iplanet/servers
ServerName rpserver.testdomain.com
ServerID https-rpserver.testdomain.com
RqThrottle 256
DNS off
Security on
PidLog /iplanet/servers/https-rpserver.testdomain.com/logs/pid
User iplanet1
StackSize 131072
TempDir /tmp/https-rpserver.testdomain.com-a9dd9515
PostThreadsEarly off
KernelThreads off
ChunkedRequestBufferSize 0
LogVerbose on
LogVsId off
AsyncDNS off
KeepAliveTimeout 10
UseNativePoll on
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib=/iplanet/servers/plugins/nsapi/wls923/libproxy128_61.so
Init fn="wl_init"
Init fn="load-modules" shlib="/iplanet/servers/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"
Init fn="stats-init" profiling="on"
obj.conf
# The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED.
# They will not be supported in future releases of the Web Server.
NetsiteRoot /iplanet/servers
ServerName rpserver.testdomain.com
ServerID https-rpserver.testdomain.com
RqThrottle 256
DNS off
Security on
PidLog /iplanet/servers/https-rpserver.testdomain.com/logs/pid
User iplanet1
StackSize 131072
TempDir /tmp/https-rpserver.testdomain.com-a9dd9515
PostThreadsEarly off
KernelThreads off
ChunkedRequestBufferSize 0
LogVerbose on
LogVsId off
AsyncDNS off
KeepAliveTimeout 10
UseNativePoll on
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib=/iplanet/servers/plugins/nsapi/wls923/libproxy128_61.so
Init fn="wl_init"
Init fn="load-modules" shlib="/iplanet/servers/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"
Init fn="stats-init" profiling="on"
server.xml
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE SERVER PUBLIC "-//Sun Microsystems Inc.//DTD Sun ONE Web Server 6.1//EN" "file:///iplanet/servers/bin/https/dtds/sun-web-server_6_1.dtd">
<SERVER qosactive="false">
<PROPERTY name="docroot" value="/iplanet/servers/docs"/>
<PROPERTY name="accesslog" value="/iplanet/servers/https-rpserver.testdomain.com/logs/access"/>
<PROPERTY name="user" value=""/>
<PROPERTY name="group" value=""/>
<PROPERTY name="chroot" value=""/>
<PROPERTY name="dir" value=""/>
<PROPERTY name="nice" value=""/>
<LS id="ls1" port="443" servername="rpserver.testdomain.com" defaultvs="https-rpserver.testdomain.com" security="on" ip="any" blocking="false" acceptorthreads="2">
<SSLPARAMS servercertnickname="Server-Cert" ssl2="off" ssl2ciphers="-rc4,-rc4export,-rc2,-rc2export,-desede3,-des" ssl3="on" tls="on" ssl3tlsciphers="-rsa_rc4_128_sha,+rsa_rc4_128_md5,-rsa_rc4_56_sha,-rsa_rc4_40_md5,+rsa_3des_sha,+rsa_des_sha,-rsa_des_56_sha,-rsa_rc2_40_md5,-rsa_null_md5,-fortezza,-fortezza_rc4_128_sha,-fortezza_null,+fips_3des_sha,-fips_des_sha" tlsrollback="on" clientauth="off"/>
</LS>
<MIME id="mime1" file="mime.types"/>
<ACLFILE id="acl1" file="/iplanet/servers/httpacl/generated.https-rpserver.testdomain.com.acl"/>
<VSCLASS id="vsclass1" objectfile="obj.conf" rootobject="default" acceptlanguage="false">
<VS id="https-rpserver.testdomain.com" connections="ls1" mime="mime1" aclids="acl1" urlhosts="rpserver.testdomain.com" state="on">
<PROPERTY name="docroot" value="/iplanet/servers/docs"/>
<USERDB id="default"/>
<SEARCH>
<WEBAPP uri="/search" path="/iplanet/servers/bin/https/webapps/search" enabled="true"/>
</SEARCH>
</VS>
</VSCLASS>
<JAVA javahome="/iplanet/servers/bin/https/jdk" serverclasspath="/iplanet/servers/bin/https/jar/webserv-rt.jar:${java.home}/lib/tools.jar:/iplanet/servers/bin/https/jar/webserv-ext.jar:/iplanet/servers/bin/https/jar/webserv-jstl.jar:/iplanet/servers/bin/https/jar/ktsearch.jar" classpathsuffix="" envclasspathignored="true" nativelibrarypathprefix="" debug="false" debugoptions="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n" dynamicreloadinterval="-1">
<JVMOPTIONS>-Djava.security.auth.login.config=/iplanet/servers/https-rpserver.testdomain.com/config/login.conf</JVMOPTIONS>
<JVMOPTIONS>-Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager</JVMOPTIONS>
<JVMOPTIONS>-Xmx256m</JVMOPTIONS>
<SECURITY defaultrealm="native" anonymousrole="ANYONE" audit="false">
<AUTHREALM name="file" classname="com.iplanet.ias.security.auth.realm.file.FileRealm">
<PROPERTY name="file" value="/iplanet/servers/https-rpserver.testdomain.com/config/keyfile"/>
<PROPERTY name="jaas-context" value="fileRealm"/>
</AUTHREALM>
<AUTHREALM name="native" classname="com.iplanet.ias.security.auth.realm.webcore.NativeRealm">
<PROPERTY name="jaas-context" value="nativeRealm"/>
</AUTHREALM>
<AUTHREALM name="ldap" classname="com.iplanet.ias.security.auth.realm.ldap.LDAPRealm">
<PROPERTY name="directory" value="ldap://localhost:389"/>
<PROPERTY name="base-dn" value="o=isp"/>
<PROPERTY name="jaas-context" value="ldapRealm"/>
</AUTHREALM>
</SECURITY>
<RESOURCES/>
</JAVA>
<LOG file="/iplanet/servers/https-rpserver.testdomain.com/logs/errors" loglevel="info" logtoconsole="true" usesyslog="false" createconsole="false" logstderr="true" logstdout="true" logvsid="false"/>
</SERVER>

Multiple prompts for all users

We have 2-factor authentication. Certs for every user is mapped so they only select the cert and enter the PIN. They do not enter username/password unless they use the certificate that is not mapped.
Lately...within the last month, many users are complaining about being prompted multiple times for their username/password. They keep entering the correct username/password and it keeps prompting. Eventually, it shows a blank page.
Users belong to multiple contractors but we gave them AD accounts on the same domain.
Any ideas?

It may be due to either of below:
1. Check if some changes happened to there mapping
2. Check the version of Browser used by effected user
3. Any new item\webpart recernt added to the page they face this issue with.
4. ULS and event log from sharepoint and active directory server

How can multiple files for the same genre be consolidated

I organize my iTunes files in genre folders for easy access. ITunes creates multiple folders for some genres and allows a single (preferred) genre file for other much larger files. How can I consolidate multiple files with the same genre?

Thanks. I've done what you selected. The problem is that despite all files being identified with the same genre, iTunes groups some genres in two separate folders. Thus, I have two "Country" folders, for example. More perplexing is that iTunes groups my largest genre folder, "Jazz", in a single folder.

Not able to generate multiple lines for headers in report

Hi,
I am new to BI publisher and not able to generate multiple lines for headers. Please help me to resolve.
I am using RTF template, data source as PS Query and XML file (system generated from the data source)
When I am using system generated 'First XML' file, I am getting output in the follwoing format.
TEAM_MEMBER, PROJECT_ID, NAME, START_DT
e.g.
EMP1 , 71000, Sample, 01-Jan-2010
EMP1 , 72000, Sample, 01-Feb-2010
EMP1 , 73000, Sample, 01-March-2010
But I want the report to be generate with multiple projects for one employee like below format , for that I used 'Second XML' file but I am getting blank report.
In short if there is one to many case, how to show in reports??? Please correct if I am going wrong.
TEAM_MEMBER
PROJECT_ID, NAME, START_DT
PROJECT_ID, NAME, START_DT
PROJECT_ID, NAME, START_DT
e.g.
EMP1
71000, Sample, 01-Jan-2010
72000, Sample, 01-Feb-2010
73000, Sample, 01-March-2010
**********First XML**************System generated XML ****************************
<?xml version="1.0"?>
<query numrows="2" queryname="SY_EMP_PROJECT" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="">
<row rownumber="1">
<TEAM_MEMBER>TEAM_MEMBER </TEAM_MEMBER>
<PROJECT_ID>PROJECT_ID samp</PROJECT_ID>
<NAME>NAME sample data</NAME>
<START_DT>2010-08-25</START_DT>
</row>
<row rownumber="2">
<TEAM_MEMBER>TEAM_MEMBER</TEAM_MEMBER>
<PROJECT_ID>PROJECT_ID samp</PROJECT_ID>
<NAME>NAME sample data</NAME>
<START_DT>2010-08-25</START_DT>
</row>
</query>
**********Second XML**************Manually created XML and using to show multiple projects for one employee****************
<?xml version="1.0"?>
<TEST numrows="2" queryname="SY_EMP_PROJECT" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="">
<TEAM_MEMBER rownumber="1">
<TEAM_MEMBER>1</TEAM_MEMBER>
<EMPLOYEE_NAME>SAMPLE</EMPLOYEE_NAME>
<PROJECT>
<PROJECT_ID>1111</PROJECT_ID>
     <PROJECT_DESCR>SAMPLE</PROJECT_DESCR>
<START_DATE>01012010</START_DATE>
</PROJECT>
<PROJECT>
<PROJECT_ID>1112</PROJECT_ID>
     <PROJECT_DESCR>SAMPLE</PROJECT_DESCR>
<START_DATE>01022010</START_DATE>
</PROJECT>
</TEAM_MEMBER>
<TEAM_MEMBER rownumber="2">
<TEAM_MEMBER>2</TEAM_MEMBER>
<EMPLOYEE_NAME>SAMPLEC</EMPLOYEE_NAME>
<PROJECT>
<PROJECT_ID>1111</PROJECT_ID>
     <PROJECT_DESCR>SAMPLE</PROJECT_DESCR>
<START_DATE>01012010</START_DATE>
</PROJECT>
<PROJECT>
<PROJECT_ID>1112</PROJECT_ID>
     <PROJECT_DESCR>SAMPLE</PROJECT_DESCR>
<START_DATE>01022010</START_DATE>
</PROJECT>
</TEAM_MEMBER>
</TEST>
Edited by: ganeshtw on Aug 25, 2010 12:14 AM

Hi,
With your first xml you can print like
EMP1
71000, Sample, 01-Jan-2010
72000, Sample, 01-Feb-2010
73000, Sample, 01-March-2010While creating the RTF template you can use the Group by option.
<?for-each-group:ROW;./columnname> then print the column name
<?columnname?>
--Then your table format
71000, Sample, 01-Jan-2010
72000, Sample, 01-Feb-2010
73000, Sample, 01-March-2010
<?end for-each-group?>
Thanks.

How to get one value from multiple duplication for a key figure field

Hi expert,
      I have a infoprovider, with following format:
        employee     hourly_rate   action_type count of action
     there are multiple rows for each employee, I want to create query as follows:
        employee     hourly_rate   action_type count of action
     in which hourly_rate is constant , only retriving one value from multiple rows for one employee, count of action should be summarized.
how to get this hourly_rate.
Many Thanks,

Hi,
put the employee in rows panel -> reaming object put it in free char panel.
suppress the all result rows for the all object except employee .
select the object -> go to query properties -> select display tab -> select result rows -> select suppress.
select the employee -> go to query properties -> select display tab -> select result rows -> select always display. - now it will give employee wise hourly rate summarize data.
Thanks,
Phani.

Passing multiple values for a single field in URL to call sap Transaction

Hi All,
I need to pass multiple values for a single field to SAP transaction .
means if i have say a field "Date" which can contain more than one value, <b>but its not a range which has two fields</b> . How is it possible.
Let me know pls.
Regards,
Sirisha.R.S.

Hi Satyajit,
I need to call a transaction with multiple values which gives me the report based on those values.
So I need to pass multiple values for a single parameter.
I hope u got it.
Regards,
Sirisha.R.S.

Any way to pass Multiple Values for a single Label in the Parameter?

I have a Report that Contains 2 Parameters, @Customer & @Area. When trying to set up the Available Values for @Area, I'm having issues using multiple values for one Label, i.e. = "4006" Or "4610"
One of the Filters in the Report is an Operation number, which is the [OPERATION] field, which is setup as a filter on the Tablix referencing the @Area parameter.
PROBLEM: I cannot retrieve any data when trying to use the ‘Or’ Operator here. If I simply put “4006” or “4610” I retrieve data, but when trying to combine it returns no data.
Example, I need to allow a user to select ‘Chassis Incoming’, which would include data from Operations 4006 & 4610.
QUESTION:
Any way to pass Multiple Values for a single Label in the Parameter?
I realize the typical solution may be to use ‘Multi-Value’ selection, but in this case we want the User to select the Area and the multiple values for Filtering will be automatically determined for them. Otherwise, they are subject to not getting
it correct.
I have tried several different ways, such as =”4006” Or “4610”, =(“4006”, “4610”), = In(“4006”, “4610”), etc….
Note: We are using Report Builder 3.0

Based on my experience, there's no way to 'intercept' the query that gets passed back to SQL Server, so a Split wouldn't work.
Try creating either a function or stored procedure using the code below (compliments to
http://www.dotnetspider.com/resources/4680-Parse-comma-separated-string-SQL.aspx) to parse the string:
CREATE FUNCTION dbo.Parse(@Array VARCHAR(1000), @Separator VARCHAR(10))
RETURNS @ResultTable TABLE (ParseValue VARCHAR(100))AS
BEGIN
DECLARE @SeparatorPosition INT
DECLARE @ArrayValue VARCHAR(1000)
SET @Array = @Array + @Separator
WHILE PATINDEX('%' + @Separator + '%' , @Array) <> 0
BEGIN
SELECT @SeparatorPosition = PATINDEX('%' + @Separator + '%', @Array)
SELECT @ArrayValue = LEFT(@Array, @SeparatorPosition - 1)
INSERT @ResultTable VALUES (CAST(@ArrayValue AS VARCHAR))
SELECT @Array = STUFF(@Array, 1, @SeparatorPosition, '')
END
RETURN
END
Once created you can do things like this:
SELECT * FROM Parse('John,Bill,David,Thomas', ',')
SELECT * FROM (SELECT 'John' AS TestName union select 'David' AS TestName) AS Main
WHERE TestName IN (SELECT ParseValue FROM dbo.Parse('John,Bill,David,Thomas', ','))
This is what your SQL query would probably look like:
SELECT OperationID, OperationName FROM dbo.Operations
WHERE AreaID IN (SELECT ParseValue FROM dbo.Parse(@Area, ','))
You may need to fiddle around with the Separator depending on whether SQL Server inserts a space between the comma and next value.

How to print multiple footers for each page in RTF template xml report.

Hi,
How to print multiple footers for each page in RTF template xml report.
i am able to print ( two sets ) ...
up to last page ( one template ) and for last page ( another template).
i want to change the footer information based on the group value printed in the report ( it might be 5 to 6) In every report run.. can you please check and let me know do we have any feasibility to achieve this.
Thanks in advance.
Regards,
KAP.

You can remove all other logic, like last page only contents (start@last-page:body), etc and section breaks if any you have inserted manually.
Just have for-each@section logic.
It would be difficult for me to guess what you have done without looking at your RTF or describing here.

I am using my Apple ID on multiple devices for other people. How can I make icloud work only for my devices?

I am using my Apple ID on multiple devices for other people in my family and now I am getting a new iphone and want to take only the information on my old iphone to the new one without the information on the other devices using the same account. Is there a way to do that?
Also, for the future can I use multiple addresses and apple IDs for the same credit card information?
Thanks in advance,
Marian

Ok, so you want to remove data (contacts, bookmarks, calendar etc) from other users from your iCloud/Apple ID?
If you want to use your ID for your family because it is the account everybody uses to buy stuff then you only need to ensure that your apple ID is set up in the store (settings-store) and then the users of each device and put their own apple ID in icloud/message/facetime/etc.
To set up your device, in my opinion, it is best to back up to itunes, and then plug your new device into itunes and "set up as ..." and select the backup from your device. This will import all your data/settings and your new device will be set up just like your old one.
I am not certain about using the same payment method for more than one account.

Multiple cert for x509

Similar Messages

Maybe you are looking for