Ws-security in JWSDP 1.5 - expired truststore

Question

Greetings,
I am trying to run the "simple" Ping example. However, the certificates in the truststore supplied with JWSDP 1.5 have expired. Where can I get a current truststore? Or better yet, how can I generate my own? A DOS batch file with my feeble attempts follows.
Thanks,
George
rem @echo off
rem distinguished name
rem CN - Certificate Name
rem OU - Organizational Unit
rem O - Organizaiton
rem L - Locality
rem ST - State
rem C - Country
set CLIENT_DNAME="CN=WS-Security_client,OU=IT,O=Kozytime,C=US"
set CLIENT_ALIAS=client
set CLIENT_PW=clientPassword
set CLIENT_KEYSTORE=%CLIENT_ALIAS%_Kozytime.jks
set CLIENT_CERTFILE=%CLIENT_ALIAS%_Kozytime.cert
set SERVER_DNAME="CN=WS-Security server,OU=IT,O=Youkea,C=US"
set SERVER_ALIAS=server
set SERVER_PW=serverPassword
set SERVER_KEYSTORE=%SERVER_ALIAS%_Youkea.jks
set SERVER_CERTFILE=%SERVER_ALIAS%_Youkea.cert
rem No client authentication keystore
set SERVER_NCAUTH_KEYSTORE=%SERVER_ALIAS%_Youkea_ncauth.jks
set DAYS_VALID=365
rem Generate client's keypair and keystore
rem Also creates a self-signed public key certificate for the client
rem By creating a keypair, the client can support client authentication
rem when connecting to the Tivoli Risk Manager server. If not using client
rem authentication, it is sufficient to import the server's public
rem key certificate into the client's keystore.
%JAVA_HOME%\bin\keytool -genkey -validity %DAYS_VALID% -keypass %CLIENT_PW% -dname %CLIENT_DNAME% -alias %CLIENT_ALIAS% -keystore %CLIENT_KEYSTORE% -storepass %CLIENT_PW%
rem Export client's public key certificate to a file
%JAVA_HOME%\bin\keytool -export -keystore %CLIENT_KEYSTORE% -storepass %CLIENT_PW% -alias %CLIENT_ALIAS% -rfc -file %CLIENT_CERTFILE%
rem Generate server's keypair and keystore
rem Also creates a self-signed public key certificate for the server
rem A server always requires a keypair, unlike the client
%JAVA_HOME%\bin\keytool -genkey -validity %DAYS_VALID% -keypass %SERVER_PW% -dname %SERVER_DNAME% -alias %SERVER_ALIAS% -keystore %SERVER_KEYSTORE% -storepass %SERVER_PW%
rem Export server's public key certificate to a file
%JAVA_HOME%\bin\keytool -export -keystore %SERVER_KEYSTORE% -storepass %SERVER_PW% -alias %SERVER_ALIAS% -rfc -file %SERVER_CERTFILE%
rem Import server's public key certificate into client's keystore as a
rem new trusted certificate.
%JAVA_HOME%\bin\keytool -import -keystore %CLIENT_KEYSTORE% -storepass %CLIENT_PW% -alias %SERVER_ALIAS% -file %SERVER_CERTFILE% -noprompt
rem Make a copy of the server keystore before adding the client's certificate
rem This can be used to test the case where no client authentication is required
copy %SERVER_KEYSTORE% %SERVER_NCAUTH_KEYSTORE%
rem Import client's public key certificate into the server's keystore as a
rem new trusted certificate. This is required only when client authentication
rem is required by the server.
%JAVA_HOME%\bin\keytool -import -keystore %SERVER_KEYSTORE% -storepass %SERVER_PW% -alias %CLIENT_ALIAS% -file %CLIENT_CERTFILE% -noprompt

Answer 1

I am having the same problem. I tried creating my own RSA keys with the same aliases, self signing them and putting them into the key/trust stores but still get errors. What procedure is there to replace them? Included below are my steps for dropping the certs and adding in new self signed ones, that I tried.
Josh
keytool -delete -keystore server-keystore.jks -alias s1as -storepass changeit
keytool -delete -keystore client-truststore.jks -alias s1as -storepass changeit
keytool -genkey -keyalg RSA -alias s1as -keystore server-keystore.jks -dname "cn=Client" -keypass changeit -storepass changeit
keytool -selfcert -alias s1as -keystore server-keystore.jks -keypass changeit -storepass changeit
keytool -export -keystore server-keystore.jks -alias s1as -storepass changeit -file s1as
keytool -import -alias s1as -keystore client-truststore.jks -storepass changeit -file s1as
keytool -delete -keystore client-keystore.jks -alias xws-security-client -storepass changeit
keytool -delete -keystore server-truststore.jks -alias xws-security-client -storepass changeit
keytool -genkey -keyalg RSA -alias xws-security-client -keystore client-keystore.jks -dname "cn=Client" -keypass changeit -storepass changeit
keytool -selfcert -alias xws-security-client -keystore client-keystore.jks -keypass changeit -storepass changeit
keytool -export -keystore client-keystore.jks -alias xws-security-client -storepass changeit -file xws-security-client
keytool -import -alias xws-security-client -keystore server-truststore.jks -storepass changeit -file xws-security-client