SSL between WebLogic 10.0 and IIS 6.0 does'nt work

Question

Hi,
I don't understand why the SSL connection between WL10.0 and IIS 6.0 doesn't work. My ini file is below:
WebLogicHost=10.0.162.31
WebLogicPort=7002
ConnectTimeoutSecs=20
ConnectRetrySecs=2
WlForwardPath=/weblogic
PathTrim=/weblogic
Debug=ON
SecureProxy=ON
TrustedCAFile=C:\trustedca.pem
EnforceBasicConstraints=off
RequireSSLHostMatch=false
where 'trustedca.pem' is the pem extracted (and converted) from wlsdemoca contained into DemoTrust.jks and '7002' is my ssl listen port.
I need to set any more parameter??
My wlpsoxy.log for one request is:
================New Request: [crl4/.wlforward] =================
Thu Apr 17 10:27:32 2008 <351612084388524> SSL is not being used
Thu Apr 17 10:27:32 2008 <351612084388524> resolveRequest: wlforward: /crl4/
Thu Apr 17 10:27:32 2008 <351612084388524> URI is /crl4/, len=6
Thu Apr 17 10:27:32 2008 <351612084388524> Request URI = [crl4/]
Thu Apr 17 10:27:32 2008 <351612084388524> attempt #0 out of a max of 10
Thu Apr 17 10:27:32 2008 <351612084388524> Trying a pooled connection for '10.0.162.31/7001/7001'
Thu Apr 17 10:27:32 2008 <351612084388524> getPooledConn: No more connections in the pool for Host[10.0.162.31] Port[7001] SecurePort[7001]
Thu Apr 17 10:27:32 2008 <351612084388524> general list: trying connect to '10.0.162.31'/7001/7001 at line 1239 for '/crl4/'
Thu Apr 17 10:27:32 2008 <351612084388524> INFO: New NON-SSL URL
Thu Apr 17 10:27:32 2008 <351612084388524> Connect returns -1, and error no set to 10035, msg 'Unknown error'
Thu Apr 17 10:27:32 2008 <351612084388524> EINPROGRESS in connect() - selecting
Thu Apr 17 10:27:32 2008 <351612084388524> Local Port of the socket is 1476
Thu Apr 17 10:27:32 2008 <351612084388524> Remote Host 10.0.162.31 Remote Port 7001
Thu Apr 17 10:27:32 2008 <351612084388524> general list: created a new connection to '10.0.162.31'/7001 for '/crl4/', Local port: 1476
Thu Apr 17 10:27:32 2008 <351612084388524> WLS info in sendRequest: 10.0.162.31:7001 recycled? 0
Thu Apr 17 10:27:32 2008 <351612084388524> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 200 OK]
Thu Apr 17 10:27:32 2008 <351612084388524> URL::parseHeaders: StatusLine set to [200 OK]
Thu Apr 17 10:27:32 2008 <351612084388524> parsed all headers OK
Thu Apr 17 10:27:32 2008 <351612084388524> sendResponse() : uref->getStatus() = '200'
Thu Apr 17 10:27:32 2008 <351612084388524> Going to send headers to the client. Status :200 OK
Thu Apr 17 10:27:32 2008 <351612084388524> Content Length = 264
Thu Apr 17 10:27:32 2008 <351612084388524> canRecycle: conn=1 status=200 isKA=1 clen=264 isCTE=0
Thu Apr 17 10:27:32 2008 <351612084388524> closeConn: pooling for '10.0.162.31/7001'
Thu Apr 17 10:27:32 2008 <351612084388524> request [crl4/] processed successfully ..................
Thu Apr 17 10:27:57 2008 <351612084387971> timed out 1 connections, idle for (at least) 25 secs
Any idea that help me?

Answer 1

I had a look into the xlclient.cmd file and went to the JAVA directory which is being used. And did a search for the "cacerts" and found out that there is a file named cacerts in the JAVA_HOME/jre/lib/security folder over there.
But how does that relate to the problem of running the keytool command successfully at the right place (OIM_DC_HOME) ?
Any hints Kevin....
Thanks,
- oidm.