Re: JVM keystores and CA

2018-10-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igor, On 10/18/18 19:09, Igor Cicimov wrote: > On Fri, Oct 19, 2018 at 2:14 AM Christopher Schultz < > ch...@christopherschultz.net> wrote: Java has no notion of CAs, nor > does any trust store, really. > > >> Correct, but by loading all CAs in t

Re: JVM keystores and CA

2018-10-22 Thread Mark H. Wood
On Fri, Oct 19, 2018 at 10:09:16AM +1100, Igor Cicimov wrote: [snip] > To conclude, the way I would expect the trust store to be used and the > whole validation done: > > 1. I use custom trust store because I need to load self signed certificates > that > I need to validate when connecting to lets

Query regarding changing base url for dogtag scep ca subsystem

2018-10-22 Thread Akshath Hegde
Hi. I have setup dogtag pki on CEL7. The scep server responds to requests when the URL is :/ca/cg-bin/pkiclient.exe. But the client is sending the get request as /cgi-bin/pkiclient.exe. How can I make this request map to the one accepted by server. Thanks in advance