Cisco Cisco Prime Optical 9.6 Developer's Guide

Cisco Prime Optical 9.6.3 GateWay/CORBA Programmer Reference Guide 

OL-28047-01

 

 

740

 

MD5: 42:53:98:7C:BA:CB:28:39:50:50:9F:E4:56:F2:43:FF 

SHA1: F5:1D:B9:BB:1D:66:C2:A1:32:BE:47:0C:85:47:17:16:A2:69:17:4C 

Trust this certificate? [no]: y 

Certificate was added to keystore 

Step 2 

Verify that the certificate issued by the client was added to the server keystore. 

 

Step 1 

Enter the following command to add the server-side certificate to the client-side 

keystore. (Use FTP or a similar tool to deliver the previously generated 

gwcorba_service_cert file from the server. The server-side certificate is located in 

the /opt/CiscoTransportManagerServer/cfg directory on the server.) 

keytool -import -keystore ascii_client_ks -alias gwcorba_service -
storepass ascii_client_ks_pass -file gwcorba_service_cert 

The command output resembles the following example: 

Owner: CN=gateway corba server, OU=Unknown, O=cisco, L=Unknown, 
ST=Unknown, C=Unknown 

Issuer: CN=gateway corba server, OU=Unknown, O=cisco, L=Unknown, 
ST=Unknown, C=Unknown 

Serial number: serial-number 

Valid from: Sat Mar 18 17:21:24 GMT+05:30 2008 until: Fri Jul 23 
10:53:08 GMT+05:30 2038 

Certificate fingerprints: 

MD5: 5C:41:39:AD:D0:F8:63:5D:81:8D:47:A0:33:02:8E:7D 

SHA1: 38:CD:C8:57:F7:15:22:DC:1A:6E:99:CD:13:A1:9A:67:90:2C:65:C2 

Trust this certificate? [no]: y 

Certificate was added to keystore 

Step 2 

Verify that the certificate issued by the server was added to the client keystore. 

To enforce SSL, complete the following configuration on the client-side jacorb.properties file.  

 

To enforce SSL, the supported and required options must be set to 60. 

 

No changes are required to the server-side jacorb.properties file, because it has already 

been changed. 

 

jacorb.security.support_ssl=on 

# IIOP/SSL parameters (numbers are decimal values): 

# EstablishTrustInClient = 40