User guide

Chapter 7: Developing Applications
7-28
/etc/opt/FJSVisscs/security/env/keystore/.keystore
Using the Keytool Command
Obtain the site certificate of the authentication server and the CA certificate that is a certificate of the site
certificate issuer. If a load balancer (such as Interstage Traffic Director) is used, use a site certificate
issued with the load balancer FQDN then use a keytool command to create a trust store file.
For keytool command details, refer to the J2SDK documents provided by Sun Microsystems, Inc.
Usage
keytool -import –file certificate-file-absolute-pathname –keystore trust-
store-file-absolute-pathname
A trust store file can be specified by specifying its file name with the system property
javax.net.ssl.trustStore. If no file name is specified, the following default files are used:
• JDK default file
%JAVA_HOME%\jre\lib\security\cacerts
$JAVA_HOME/jre/lib/security/cacerts
The initial password is “changeit.”
• JSSE default file
%JAVA_HOME%\jre\lib\security\jssecacerts
$JAVA_HOME/jre/lib/security/jssecacerts
Note
Use JDK1.4 if UTF-8 is used for the authentication server site certificate and CA certificate.