It's all about the answers!

Ask a question

Why does RDDI "no longer find the 'ca' certificate" after I import the SSL certificate into the report server trust store?


Robin Parker (32633739) | asked Jul 06 '12, 12:56 p.m.
edited Jul 07 '12, 9:00 a.m. by Geoffrey Clemm (30.1k33035)
Hi all,

I have trying to setup RRDI 2.0 in WAS 8.x  I would like to access RRDI using https rather than http.
I am setting this up on RHEL 5.x

I'm trying to follow these instructions: http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0/topic/com.ibm.rational.rrdi.admin.doc/topics/t_general_was_ssl.html

I'm having trouble with the Importing the SSL certificate into the report server trust store section.  Once I have completed step 9, I have found that the application no longer starts.  The conserver.log file indicates that it is no longer able to find the 'ca' certificate.

In step 12, <RRDIInstallDir>/cognos/bin/jre/6.0 doesn't appear to contain a valid ire so I have used the WebSphere one, /opt/IBM/WebSphere/AppServer/java.

I have tried this procedure using both the default WebSphere certificate and a self signed one.

In all of my attempts, once step 9 is complete, the application can no longer find the ca certificate.

Is anyone able to assist?

Many Thanks.



Accepted answer


permanent link
Ali Manji (59147) | answered Oct 12 '12, 9:51 a.m.
JAZZ DEVELOPER
Hi Robin - are you able to try these steps again with a fresh install.  But this time skip steps #6-9.

Also, there is an issue on Linux that you need to account for after completing step #12:

On Linux x64 the [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh references the incorrect JAR file. Open [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh and make the following change to the CLASSPATH :

FROM:

CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov-jdk14-134.jar

TO:

CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov_jdk14_145.jar
Robin Parker selected this answer as the correct answer

Comments
Robin Parker commented Oct 24 '12, 5:21 a.m.

Hi Ali,

Apologies for the later reply.  I had other RRDI issues which prevented me from trying this again.
I have now tried these steps and they seem to have worked.  I have gone on to the 'Configuring the report server to use HTTPS URLs' section and in step 7, the string 'CWPKI0428I' doesn't seem to have appeard in the log file.  I hope this is OK.
But on face value it seems to be working.  Thanks.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.