[jboss-dev-forums] jboss ssl connectivity error to LDAP Directory server

[Sharath Chalasani]

Hello there,

I have jboss running with ssl enabled on it with a PKCS12 form of keystore,
which has all the certs(including root certs) imported into it

I also have a LDAP directory server running with ssl enabled on it
which has the JKS form of keystore(with all certs and root certs imported in it)

A seam app is deployed on jboss, connectivity is made between JBOSS and 
LDAP Directory server, though LDAP api jar, implementing the ssl code in it. 
Through this connection, the data in the seam app can be viewed in LDAP Directory server. Any changes made to 
the data in seam app, reflects in Directory Server also.

This connection is using the non-ssl port.
Now even if I mention the ssl port (9636) of LDAP Server, in properties file, where the connection parameters are declared
I get an LDAP Exception Error(false, cannot connect to any servers in properties file).

Is this something, where I need to change anything on jboss side, in properties-service.xml or server.xml 
or any other conditions.

Note - The keystore in jboss has all the certs including cert of LDAP Server and root cert imported in it
and keystore and truststore of LDAP Server also has all the certs including the jboss cert and the root cert imported in it

Error I am getting on LDAP Side --
|--> conn=547 op=3 UnbindRequest {}
2009-08-07 10:02:17,327 |localhost~090807094931|*** conn=548 CLIENT(127.0.0.1:55383) connected on SERVER(127.0.0.1:9636) 
2009-08-07 10:02:17,429 |localhost~090807094931|*** conn=548 CLIENT(127.0.0.1:55383) disconnected: Unrecognized SSL message, plaintext connection?
2009-08-07 10:02:17,429 |localhost~090807094931| 

Error on jboss side
-->
LDAP Exception - Cannot connect to any servers in properties file



Thanks in Advance
Sharath


      See the Web's breaking stories, chosen by people like you. Check out Yahoo! Buzz. http://in.buzz.yahoo.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20090807/d323c40f/attachment.html