SSL is a standard technology for connecting systems in a client server architecture. Setting up our Java based applications to use SSL requires setting up keystores and truststores. Java provides a key and certificate management utility called keytool that can be used to setup required key and trust-stores for secure communication. With websphere, things get a little different. Websphere provides a tool called ikeyman that is used to manage key and trust databases. The JEE container loads the SocketFactory, that an application can refer using SSLSocketFactory.getDefault(), with the certificates from the key and trust databases. The default instance of SSLSocketFactory does not load certificates that might be present in the JRE. This brings us to a major consideration while working with SSL on websphere. Work only with default SSLSocketFactory . APIs not using default SSLSocketFactory will not work, unless we write code that handles the certificates and sets up SSLSocketFac...
Junked my old tech blog. Here I plan to write about topics relevant to real world implementation of enterprise applications.