Hello
We have installed a new certificat on the ARIS server, following ACC documentation
all is ok for https access
but we have an error when starting a .jar client..
message "impossible to connect to server, you try to use a SSL connection, the certificat is not approved or not imported in JRE..."
not found in documentation something regarding certificat and .jar...
thanks for your help
pam
Hi folks,
let me inform you that the new, recently released version of ARIS 10 (SR 6) is able to handle this for you.
Before 10.0 SR 6:Normally, if you use a self-signed certificate) you create a file "cacerts" and place it in this folder...
<server install dir>\server\bin\work\work_abs_<s|m|l>\base\webapps\abs\downloadClient\config
... on all ABS nodes.
All download clients (unfortunately not installed clients) will automatically use this cacerts file.
You create this file via importing this into an JRE with the "keytool" and copy this file to the location specified above.
ARIS Architect/Designer, installed or download, is able to import this file in the used JRE. The user is prompted whether he wants to accept this certificate in order to connect to the server. Cool, isn't it?
BTW: an admin can use this mechanism to let the "cacerts" file be created from ARIS and then use it to copy it on the location on the server, so other users are not prompted at all.
Bye,
Frank
good news !
but seems not available in download area for university ?
pam
Hi,
no, sorry, currently, the 10.0 SR 5 version is available for university users...
Bye,
Frank
if that can help...
pb solved with a java security expert,
the error was coming from the "certification chain" in the .crt...not correctly set...
all is now ok
Martin Schröder on
Hello Pierre,
the message suggest two possible reasons "...the certificate is not approved or not imported in JRE...".
So either the certificate cannot be validated against the issuer (do you use a self-signed cert. or was it issued by a public Certificate Authority?) or it may not be present in the Java keystore.
The ACC Command Line doc points out: "If your company uses own CA get a certificate from this CA and add this CA to the trust store of all clients."
Both the Download Client Configuration Guide and Basic Trouble Shooting Guide offer more details than the ACC docu.
Regards, Martin