Comments on TDIing out loud, ok SDIing as well: Importing a client certificate in order to access an https URL

@Arif You could try deleting the cert from your ke...

2018-09-17T09:26:08.692+02:00

@Arif You could try deleting the cert from your keystore and then re-importing it. See if that helps. Also, drop your question(s) into the TDI forum and give lots of sharp TDIers a chance to answer you :)
https://groups.google.com/group/ibm.software.network.directory-integrator/topics?gvc=2

Hi Eddie I have click on "Get certificate&qu...

2018-09-17T07:28:22.006+02:00

Hi Eddie

I have click on "Get certificate" button in http client connector and got message "Connection is already trusted" and then restared the TDI.

While running the assembly line getting this error "PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:

I manually added the cert to the truststore jks an...

2018-03-22T10:49:29.652+01:00

I manually added the cert to the truststore jks and got it working.

Thanks @Eddie. Upgrading the TDI is not the opti...

2018-03-21T14:15:37.907+01:00

Thanks @Eddie.

Upgrading the TDI is not the option at this moment.

Is there an alternate way to do it in the existing TDI?

Hi @Ninad. That will depend on the version your ar...

2018-03-21T13:22:21.418+01:00

Hi @Ninad. That will depend on the version your are running. If you have TDI 7.1 or 7.1.1 then I think all you need is to install the latest fixpack for that version.

I don't see the Get Certificate button in the ...

2018-03-21T12:54:05.758+01:00

I don't see the Get Certificate button in the Connection tab of the HTTP Client connecter..

Also, when i try to execute the script you have mentioned above, it gives exception saying com not found. I tried adding Packages.com... but it gives error as "Error calling method 'GetSSLCertificate()': 'Packages.com.ibm.di.security' is not a valid object"
<

It should. Away from my PC, so I'm being optim...

2017-03-05T17:54:01.879+01:00

It should. Away from my PC, so I'm being optimistic, Pieter :)

cool, does this also work for ldaps://... ?

2017-03-05T11:22:46.358+01:00

cool, does this also work for ldaps://... ?