remote asadmin and security issue (-s, certificate)

I believe this is a problem with security certificate settings. Pls help!

--

Quick outline of what I am trying to do.

situation/

1. there are 2 system: devbox, and prodbox.

2. both system running SJSAS 7

3. I tried to list remote SJAS instances using asadmin.

4. the remote box has security configured.

basically using asadmin remotely. There are reasons why we want to do this, but the most important thing is, we can't do it. Prodbox is configured with security.

command issued

asadmin list-instances --user <uname> --password <secret> --host <prodbox_url> --port 4850 -s

Could not list the instances

java.io.IOException: subject key, Unknown key spec: Invalid RSA modulus size.

info:

-s is for security. Without this, the command will just hangs and then times out.

- asadmin list-instance scan be done on devbox (localhost) so syntax of command is alright

- username and password is definitley correct

question

I fully believe the problem is in setting up the security certificate to allow asadmin in devbox to be able to administer the SJSAS in the prodbox

What are the things that we need to set up to allow asadmin to access remote SJSAS configured with security?

[1331 byte] By [zenimitsu] at [2007-11-26 8:26:07]
# 1

I believe this is app server 7.x.

Can you try the following (I am not a 100% sure):

- Export the server certificate from the cert7.db (the cert that's configured for the

admin listener).

- Import that cert in a client trust store.

- Use -Djavax.net.ssl.trustStore to point to the truststore where you imported

the cert.

Thanks,

Kedar

kedarmhaswade at 2007-7-6 21:39:58 > top of Java-index,Application & Integration Servers,Application Servers...
# 2

Sorry haven't had time to test this out, I tried another approach on the prod box itself which overcame this (I love workaround). So I won't know whether this will work or not.

1 duke dollar for your effort tho :-) and I think ur suggestion have a high probability to work out anyway. Will give the rest when I can (finally) try them out :-p

zenimitsu at 2007-7-6 21:39:58 > top of Java-index,Application & Integration Servers,Application Servers...