在Guidewire的码头本地服务器中找不到有效的证书路径

Question

I am unable to resolve this error of "Unable to find valid certificate path". I am setting all required system property eg

System.setproperty(javax.net.ssl.trustStoreType,"jks")
System.setproperty(javax.net.ssl.trustStore,keystorePath)
System.setproperty(javax.net.ssl.trustStorePassword,password)

I tried setting the VM arguments, but nothing is working for me. I am using Guidewire studio localServer (jetty).

Answer 1

Jetty does not use JVM javax.net.ssl.* system properties to configure the SSL for specific connectors.

Look for anything in Guidewire studio that configures an SslContextFactory (the Jetty specific term for the SSL/TLS configuration belonging to a connector), and configure that.

Answer 2

The keystore would be taken from the JVM, so it kind of depends how you run your GW xCenter.

Since you ask about local Jetty the parameters you are looking for are

-Djavax.net.ssl.keyStore=C:\{pathToKeystoreOnYourMachine}\keystore.jks
-Djavax.net.ssl.keyStorePassword={thePasswordToBeUsed}

In order to add those on gwb runServer level you would have to add a pass through prefix gw.passthrough. resulting in for example

gwb runServer -Dgw.passthrough.javax.net.ssl.keyStore=/Java/jdk1.8.0_74/jre/lib/security/cacerts