https://wsit.dev.java.net/issues/show_bug.cgi?id=749------- Additional comments from
pmajhwar@... Thu Dec 6 15:18:01 +0000 2007 -------
Explanation how to configure your machine. Hope this helps.
Generate a certificate using the following command.
CN=machineName
"C:\Program Files\Microsoft SDKs\Windows\v6.0\Bin\makecert.exe" -r -pe -
n "CN=prodsk0408" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr
localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -
sy 12
Change the Webservice web.config findvalue as per your machine.
<serviceCertificate findValue="CN=prodsk0408" storeLocation="LocalMachine" />
also change the service endpoint to
<endpoint address="
http://prodsk0408/AddNumbers/service.svc" to point it to
your machine
Now we are going to export the certificate from the Local computer's personal
store and import to trusted store also import to the current user's personal
and trusted
run mmc using the command prompt
- Select File ->add/remove Snap-in -> select add -> select certificates from
the list -> select computeraccount -> finish
- again Select File ->add/remove Snap-in -> select add -> select certificates
fromthe list -> select my user -> finish
Now from the Local Computer's personal certificate choose the certificate just
created and export. make sure while exporting the private key is also exported
as the key is used by webservice
Import the certificate to local computer's trusted store and be sure that key
is exportable is selected.
Import to Current user's personal and trusted store.
Next go to the following directory and give the
C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys
give everyone full permission to the keys generated on todays date.
host you webservice and restart you iis. see if this link is working
http://localhost/AddNumbers/service.svcExport the certificate from current users personal Store to cert.crt file. Note
this export is without the private key.
open command prompt and change to dir where the certificate was exported
Use keytool to import into your keystore. (storepass, alias, keystore is
hardcoded in the code for now.)
keytool -import -alias prodsk408 -storetype jks -keystore wsftp.ks -storepass
abcd1234 -trustcacerts -file cert.crt
---------------------------------------------------------------------
To unsubscribe, e-mail:
issues-unsubscribe@...
For additional commands, e-mail:
issues-help@...
