Use a different KeyStore type for the SSL keystore

i use SUN Application Server PE 8 (with the included JDK 1.4.2) on Windows XP.
i want to configure a HTTP listener in a way that it uses the private key and certificate for SSL from a different keystore. the keystore is a PKCS11 keystore from an IAIK PKCS#11 Provider.
i know how to configure a HTTP listener using SSL (HTTPS) in principle. i get it working using a JKS keystore, i.e. the format of the SUN file keystore.
i added a new JCE provider (i.e. the IAIK PKCS#11 Provider) to the underlying JDK in the java.security file (i am quite familiar with JCA/JCE stuff). i added it in a way which works with JSSE and Java 1.4 in other stand-alone applications.
then i modified the SSL settings of that listener to use the name of my private key in my keystore. the entry in the domain.xml looks like this.
<http-listener acceptor-threads="100" address="0.0.0.0" default-virtual-server="server" enabled="true" id="http-listener-2" port="1053" security-enabled="true" server-name="" xpowered-by="true">
<ssl cert-nickname="CN=testcomputer1,OU=Insitute for Applied Information Processing and Communications,O=GRAZ UNIVERSITY OF TECHNOLOGY,C=AT" client-auth-enabled="false" ssl2-enabled="false" ssl3-enabled="true" ssl3-tls-ciphers="+rsa_rc4_128_md5,+rsa_3des_sha,-rsa_des_sha,-rsa_rc4_40_md5,-rsa_rc2_40_md5,-rsa_null_md5,-rsa_des_56_sha,-rsa_rc4_56_sha" tls-enabled="true" tls-rollback-enabled="true"/>
</http-listener>
in addition i changed a JVM option and added two new ones to configure JSSE to use the correct key store
<jvm-options>-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/pkcs11keystore.p11</jvm-options>
<jvm-options>-Djavax.net.ssl.keyStorePassword=1234</jvm-options>
<jvm-options>-Djavax.net.ssl.keyStoreType=PKCS11</jvm-options>
when i tried to start the server, i got an error from the ORB. it looked like this:
[#|2005-08-12T10:39:53.615+0200|WARNUNG|sun-appserver-pe8.0.0_01|javax.enterprise.system.stream.err|_ThreadID=10;|java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at org.apache.commons.launcher.ChildMain.run(ChildMain.java:269)
Caused by: java.lang.ExceptionInInitializerError
     at com.sun.enterprise.iiop.IIOPSSLSocketFactory.init(IIOPSSLSocketFactory.java:216)
     at com.sun.enterprise.iiop.IIOPSSLSocketFactory.<init>(IIOPSSLSocketFactory.java:129)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:274)
     at java.lang.Class.newInstance0(Class.java:308)
     at java.lang.Class.newInstance(Class.java:261)
     at com.sun.corba.ee.impl.orb.ParserTable$3.operate(ParserTable.java:460)
     at com.sun.corba.ee.impl.orb.NormalParserAction.apply(NormalParserAction.java:22)
     at com.sun.corba.ee.spi.orb.PropertyParser.parse(PropertyParser.java:52)
     at com.sun.corba.ee.spi.orb.ParserImplBase.init(ParserImplBase.java:56)
     at com.sun.corba.ee.impl.orb.ORBDataParserImpl.<init>(ORBDataParserImpl.java:339)
     at com.sun.corba.ee.impl.orb.ORBImpl.postInit(ORBImpl.java:421)
     at com.sun.corba.ee.impl.orb.ORBImpl.set_parameters(ORBImpl.java:498)
     at org.omg.CORBA.ORB.init(ORB.java:337)
     at com.sun.enterprise.util.ORBManager.createORB(ORBManager.java:343)
     at com.sun.enterprise.util.ORBManager.init(ORBManager.java:230)
     at com.sun.enterprise.server.J2EEServer.createORB(J2EEServer.java:336)
     at com.sun.enterprise.server.J2EEServer.run(J2EEServer.java:180)
     at com.sun.enterprise.server.J2EEServer.main(J2EEServer.java:600)
     at com.sun.enterprise.server.ApplicationServer.onInitialization(ApplicationServer.java:232)
     at com.sun.enterprise.server.PEMain.run(PEMain.java:210)
     at com.sun.enterprise.server.PEMain.main(PEMain.java:172)
     ... 5 more
Caused by: java.lang.IllegalStateException: Invalid keystore format
     at com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:68)
     ... 29 more
|#]
i thought it uses the same keystore. thus, i changed the NickName in the SSL configuration of the ORB listeners to use the same key. this did not solve the problem. then i tried to remove all SSL-enabled listeners for the ORB. the ORB should not use SSL at all. however, this did not help either. i get the same error. it seems that there is some code involved here which prevents using a different key store type.
can anyone help solving this problem, or at least finding the actual reason? one does not need a hardawre keystore to reproduce this problem. using a PKCS#12 keystore produces the same error; i.e. change the keystore type to "PKCS12" (implemented in the SUN JSSE provider) and the keystore file and password accordingly. i tried this with the standard configuration of the JDK, i.e. without any additional JCE providers.
please tell me how i can use a different key store type for SSL (HTTPS).
Karl

Application Server PE only supports "JKS" format. If you are interested in support for other formats, please submit a request for enhancement on project glassfish (Open Source application server) http://glassfish.dev.java.net.
If you have time, you might want to checkout and look at the source in glassfish/appserv-core/src/java/com/sun/enterprise/security/SecuritySupportImpl.java.
You should be able to fix it on your own.
Hope this helps,

Similar Messages

I have 2 iphone with the same apple id. Now I want to use a different apple id for the iphones. How to do it? Help . Thank you!

I have 2 iphone with the same apple id. Now I want to use a different apple id for the iphones. How to do it? Help . Thank you!

Create a new Apple ID using a new valid e-mail address
https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/
In iPhone's Settings > Store > Apple ID > Sign Out and sign in the new.

Use a different movement type for Scrap in Production Order Confirmation

Hello gurus. I have the following question.
Is it possible to have the "Scrap" quantity during Production confirmation in a separate movement type?
Currently, when I type in the "Yield" and "Scrap" quantities, both of them are summarized into one backflush line under Movement Type 261. So for example: Yield: 10 pieces and Scrap 5 pieces; I only get one Goods Movement for 15 pieces with MvT 261.
The requirement is that whatever is typed under "Scrap" goes on a different movement type (e.g. 551), because then it will be easy to follow (inventory-wise) how many pieces were used in production and how many were scrapped.
Is it possible?

Thanks for your reply Krishna.
Well, I notice that when I type a quantity in the "Scrap" field, the difference with "Yield" is that I simply don't get the produced material on stock (in the case of the last operation with a GR for instance). I just get the backflushed quantity.
But yes, I guess in this transaction, I'm scrapping the produced material, the components are still issued. I was just wondering if perhaps they could be split in 261 for normal backflush and 551 for backflush that didn't generate any finished assembly.
Thanks for your insight.

Can i use a different apple id for the apple store?

I wanted to have a seperate account for the apple store. Is this possible? anyone please help.

Yes, you will need to use a different email address when you create the second Apple ID.
Best of luck.

Can I use a different email address for the forums than my Apple ID?

Hi,
I generally use a particular email address for all my computer/IT forum questions. This email address is different than my Apple ID email address.
Can I change my forum email address (doesn't look that way) without changing my Apple ID address?
Thanks,
Scott

Fair warning... years ago I went with my work email address as my Apple ID. Now, with the advent of iCloud and all the other 'services' attached to your Apple ID, I find that half the time I cannot log into any one particular service. Apple's servers and ID system is getting way too messy. Keep it as simple as you can. If you add a different email address you are pretty much guaranteed that things will get more complicated.
These days, to log into these forums I actually have to log into Apple Store first. The discussion log in page will not allow me to log in any longer.
Keep it simple!
Rick

I want to set default printer settings to be used only for a specific type of application, certain documents. All other print jobs should use a different default setting for the printer.

I am printing a specific document from a web based application. This document need to be printed in landscape. So I would like to set the default settings for this specific printer to landscape. But for all other printers it should be portrait. But this does not seem to work. The browser picks the settings from the standard/default printer and uses this for all print jobs.

Embie wrote:
I was told by support that my problem was a hardware problem and that HP would not replace the faulty hardware. Great. I will replace my faulty hardware manufacturer. Simple, HP never again.
In the hour since you have registered you have posted seven messages, none of which contain any useful information that would allow someone here to help you. Please read this post then provide some details in a new thread. What printer model? What operating system? How is the printer connected - USB, wired LAN, Wireless LAN, bluetooth? What is the problem you are having (with the printer...)?
Bob Headrick, HP Expert
I am not an employee of HP, I am a volunteer posting here on my own time.
If your problem is solved please click the "Accept as Solution" button ------------V
If my answer was helpful please click the "Thumbs Up" to say "Thank You"--V

Using two different calculation type for one condition in purchasing

hi
purchasing price must be callculated as the mix of fixed and quantity calculation types, example is below;
for material A whose purchasing unit of measure is quantity (piece) but base unit of measure is gr.
1.from 1 gr to 500 gr discount must be 50 usd as fixed,so 1 gr discount is the same with 499 gr discount.
2. from 501 gr up to x, 0,10 usd per gr
for example;
if quantity = 10 and total default gr from material 450, discount must be 50 usd as fixed.
but during good receipt in migo 10 piece can be 600 gr so, price must be calculated as 600*0,10 = 60 usd.
or vice versa,in purchasing order total gram can be gretaer than the gr which will be used in migo during good receipt .
if quantity = 10 and total default gr from material 600, discount must be 60 usd as scaled.
but during good receipt in migo 10 piece can be 450 gr so, price must be calculated as 50usd as fixed.
it s a little complicated.
Thanks in advance.

TW Typewriter
If the coding is not written correctly, it would definitely affect the system performance. This is not only for user exit but also will be applicable to routines. So it makes no difference.
And is not difficult to get an access key to do this development
Not in all cases. In some projects, getting an Access Key itself is very difficult and it undergoes cumbersome process from client side. So we have to take a decision on case to case basis whether to go with routine or user exit.
G. Lakshmipathi

I'm useing 2 different apple ID for the App Store. When I try to purchese a app. It said "cannot continue with purchese"

What do I do?

Contact iTunes Customer Service and request assistance
Use this Link > Apple Support iTunes Store Contact

Can we have different output types for same document?

Hi,
Can we have different output types for same doucument.if yes plz describe the steps to perform it
Thanks

Hi,
Generally you can use same out put type for the different document types of PO. You can create different out put types for the same PO, in case you need different layouts that is different forms like MEDRUCK. Please refer below link to create out types . If you want that PO as fax or e-mail can use same out put type .Thanking you.
http://www.sap-img.com/materials/purchasing-tips.htm

Different movement types for store Physical Count process

Hi Experts
Would like to ask for your advice in terms of using different movement types for physical inventory process.
The scenario is like this:
1) Our client uses different counting processes for store inventory, with both annual full stock take AND spontaneous ad-hoc counting which is more frequent and involve probably around 30 articles a week.
2) Both types of counting involve count result interface from a 3rd party POS system
3) Since it is count result interface, we are considering the standard PI process (MI01, MI04, MI07, MI31, MI20, etcetc)
4) However the standard movement type is 701/702 while our client request a different financial posting, hence different movement types, for the ad-hoc counting
So the question is very simple: Is there a way for SAP to determine using 701/702 when it is a full stock take, while using another set of Z-movement types when it is a ad-hoc count. Bare in mind that both information are the count result, not a variance adjustment, from external POS system.
Appreciate very much for your help!
BR
Dom

System determine 701/702 in the IMS . refer t code OBYC - Trans GBB- gen modfier INV - GL Account assignment.
regards
manu

While running my app I get the below error - have different Class objects for the type javax/servlet/http/HttpServletRequest used in the signature

I am running ATG[10.1.2] app on Jboss [EAP 5.1.0 GA] I am able to open dyn/admin however when I start my app I get the below error
java.lang.LinkageError: loader constraint violation: when resolving method "atg.servlet.ServletUtil.setSessionConfNumCacheRequest(Ljavax/servlet/http/HttpServletRequest;)Ljavax/servlet/http/HttpServletRequest;" the class loader (instance of org/jboss/classloader/spi/base/BaseClassLoader) of the current class, atg/filter/dspjsp/PageFilter, and the class loader (instance of org/jboss/classloader/spi/base/BaseClassLoader) for resolved class, atg/servlet/ServletUtil, have different Class objects for the type javax/servlet/http/HttpServletRequest used in the signature
at atg.filter.dspjsp.PageFilter.doFilter(PageFilter.java:215)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at atg.servlet.ForwardFilter.doFilter(ForwardFilter.java:263)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at atg.servlet.ErrorFilter.doFilter(ErrorFilter.java:279)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:638)
at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:446)
at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:382)
at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:310)
at org.apache.catalina.core.StandardHostValve.custom(StandardHostValve.java:416)
at org.apache.catalina.core.StandardHostValve.status(StandardHostValve.java:342)
at org.apache.catalina.core.StandardHostValve.throwable(StandardHostValve.java:286)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:680)
11:22:47,413 ERROR [[localhost]] Exception Processing ErrorPage[errorCode=500, location=/global/errorPage500.jsp]

The supported JBoss version for 10.1.2 is JBoss EAP 5.1.2 but I don't think that your issue is caused because of this. Your issue is more of an environmental thing as you are probably getting two different versions getting loaded of class javax.servlet.http.HttpServletRequest and so correspondingly two different Class objects as the error shows. One reason for this could be if you include any server-specific libraries (in present case the Servlet API JAR which contains the class javax.servlet.http.HttpServletRequest) of a different version in the /WEB-INF/lib of your web application. Try removing it from there if so and see if that helps.

Is it possible to have Different Interval Ranges for the same Doc Type

Dear All,
Here is the issue.Is it possible to have different interval ranges for the same document type according to certain condition.Like my client , wants his interval ranges be divided according to region(which are many)
Regards,
Sameer Jalees

Hello,
As you know we can only assign one number range for External and one number range group for internal in the sales document type.
If you want different number ranges based on the regions, then as Jignesh suggested, you need to go for an enhancement.
Use the exit USEREXIT_NUMBER_RANGE in program MVA45AFZZ, include a Z table with region as a critera and number range group for different numbers based on the regions. Talk to the business and get more details, get the help of ABAP team for technical details.
Regards,
SAM

Different document type for Preq's created by the PM-order.

Hi folks,
Currently a PM order auto creates a Preq, after releasal of the PM order. The Preq now has the standard document type NB. Is there any way to use a different Preq document type for the req's created by the PM-order?
Thanks for the suggestions.

Questions is answered.

Want to use different valuation type for one finish in house prod. materia

Hi,
Please update on subject requirement of different valuation type for same finish in house produced material.
We take e.g. as below
Valuation type -1) VA01
2) VA02
Want to assign both valuation types to material FINISH01
Then, i want create process order as per valuation type VA01 & VA02 ,let consider for 5 quantity each. While creating process
order, system shoulf propose selection of valuation type.
Regards,
Chetan

Hi,
use Split Valuation, When u do the GR against production order...System will ask valuation type.
and Same material code with maintained with different valuation type in your inventory.
Regards,
Pardeep Malik

I want to use 1 itunes account but with 3 different iphones 2 for the kids and one for me, what is the easiest way to do that?

I want to use 1 itunes account but sync 3 different iphones, 2 for the kids and 1 for me. So I would like to have different programs, songs, apps etc for each phone. What is the easiest way to do that

Agreed heather. Also, if you have three users on the same account how do you keep phone calls and messages from going to all three phones?

Use a different KeyStore type for the SSL keystore

Similar Messages

Maybe you are looking for