Why does RDDI "no longer find the 'ca' certificate" after I import the SSL certificate into the report server trust store?
Hi all,
I have trying to setup RRDI 2.0 in WAS 8.x I would like to access RRDI using https rather than http.
I am setting this up on RHEL 5.x
I'm trying to follow these instructions: http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0/topic/com.ibm.rational.rrdi.admin.doc/topics/t_general_was_ssl.html
I'm having trouble with the Importing the SSL certificate into the report server trust store section. Once I have completed step 9, I have found that the application no longer starts. The conserver.log file indicates that it is no longer able to find the 'ca' certificate.
In step 12, <RRDIInstallDir>/cognos/bin/jre/6.0 doesn't appear to contain a valid ire so I have used the WebSphere one, /opt/IBM/WebSphere/AppServer/java.
I have tried this procedure using both the default WebSphere certificate and a self signed one.
In all of my attempts, once step 9 is complete, the application can no longer find the ca certificate.
Is anyone able to assist?
Many Thanks.
Accepted answer
Hi Robin - are you able to try these steps again with a fresh install. But this time skip steps #6-9.
Also, there is an issue on Linux that you need to account for after completing step #12:
On Linux x64 the [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh references the incorrect JAR file. Open [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh and make the following change to the CLASSPATH :
FROM:
CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov-jdk14-134.jar
TO:
CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov_jdk14_145.jar
Also, there is an issue on Linux that you need to account for after completing step #12:
On Linux x64 the [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh references the incorrect JAR file. Open [RRDI_INSTALL_DIR] /cognos/bin/ThirdPartyCertificateTool.sh and make the following change to the CLASSPATH :
FROM:
CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov-jdk14-134.jar
TO:
CLASSPATH=.:dom4j-1.6.1.jar:../webapps/p2pd/WEB-INF/lib/jaxen-1.1.1.jar:xerces.jar:cclcfgapi.jar:cclcfgapi_mfc.jar:jcam_crypto.jar:i18nj.jar:icu4j.jar:commons-httpclient-3.1.jar:CognosIPF.jar:log4j1.2.8.jar:jcam_jni.jar:enttoolkit.jar:../webapps/p2pd/WEB-INF/lib/bcprov_jdk14_145.jar
Comments
Hi Ali,
Apologies for the later reply. I had other RRDI issues which prevented me from trying this again.
I have now tried these steps and they seem to have worked. I have gone on to the 'Configuring the report server to use HTTPS URLs' section and in step 7, the string 'CWPKI0428I' doesn't seem to have appeard in the log file. I hope this is OK.
But on face value it seems to be working. Thanks.