<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple style='margin-bottom:33.75pt'><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Hi,<o:p></o:p></span></a></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Just checking, did you add the domain controllers certificate to the key store?<o:p></o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'></span><a href="https://wiki.evolveum.com/pages/viewpage.action?pageId=15859743"><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>https://wiki.evolveum.com/pages/viewpage.action?pageId=15859743</span></span><span style='mso-bookmark:_MailEndCompose'></span></a><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p></o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Regards,<o:p></o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Brad<o:p></o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></span></p><p class=MsoNormal><span style='mso-bookmark:_MailEndCompose'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></span></p><span style='mso-bookmark:_MailEndCompose'></span><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> midPoint [mailto:midpoint-bounces@lists.evolveum.com] <b>On Behalf Of </b>dilek.gider@basistek.com<br><b>Sent:</b> Tuesday, 25 April 2017 3:03 PM<br><b>To:</b> Jason Everling <jeverling@bshp.edu>; midPoint General Discussion <midpoint@lists.evolveum.com><br><b>Subject:</b> Re: [midPoint] Fwd: AD configuration with LDAP Connector, ssl issue<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-size:10.0pt'>Thank you for your reply, i created keystore manually with wiki evolveum Keysotore Configuration document. I dont know how if midpoint creates keystore by itself, automatically.<o:p></o:p></span></p></div></div><div><div id=LGEmailHeader><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>------ Original message------<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.0pt'>From: </span></b><span style='font-size:10.0pt'>Jason Everling<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.0pt'>Date: </span></b><span style='font-size:10.0pt'>Mon, Apr 24, 2017 18:41<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.0pt'>To: </span></b><span style='font-size:10.0pt'>midPoint General Discussion;<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.0pt'>Cc: </span></b><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.0pt'>Subject:</span></b><span style='font-size:10.0pt'>Re: [midPoi nt] Fwd: AD configuration with LDAP Connector, ssl issue<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div></div><div><p class=MsoNormal><span style='font-size:10.0pt'>From what I can see, it is showing 'unsupported ciphersuite' along with other ssl/tls startup errors. Did you let midpoint create the keystore when it first started up or did you manually create it? The midpoint team should be able to help further but I have never encountered that error before with midpoint. Only ssl chain errors which is easily fixed and I dont see that in your logs. <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><br clear=all><o:p></o:p></span></p><div><div><div><p class=MsoNormal><span style='font-size:10.0pt'>JASON<o:p></o:p></span></p></div></div></div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt'>On Mon, Apr 24, 2017 at 7:26 AM, Dilek Gider <<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>> wrote:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><p class=MsoNormal><span style='font-size:10.0pt'>Hi Again, <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>Is there anybody to help me please.. Details are below.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt'>---------- Forwarded message ----------<br>From: <b>Dilek Gider</b> <<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>><br>Date: Thu, Apr 20, 2017 at 4:20 PM<br>Subject: AD configuration with LDAP Connector, ssl issue<br>To: midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br><br><o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt'>Hi , <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>I have resource to AD from midpoint, with LDAP Connector. You can find resource.xml as attchment. I couldn't connect this resource with LDAP via SSL. I followed <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><a href="https://wiki.evolveum.com/displ%20ay/midPoint/Keystore+Configuration" target="_blank">https://wiki.evolveum.com/display/midPoint/Keystore+Configuration</a> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>link, added Tomcat java options but it doens't work. Also I added logs about this resource, error logs. <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>I wrote java jar to connect AD via ssl and execute it from the same location with my java connector, it succeeded. But in midpoint it could not communicate with AD via SSL. Without SSL, it is communicating with AD from LDAPConnector.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>I have java 8_101, tomcat 8.5.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>I have certificate as "cer" file, I imported to both java cacerts and midpoint keystore. and it is listed with my alias: <o:p></o:p></span></p></div><div><div><p class=MsoNormal><span style='font-size:7.5pt'>Keystore type: JCEKS</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>Keystore provider: SunJCE</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'><br><br></span><span style='font-size:10.0pt'><o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:7.5pt'>Your keystore contains 3 entries</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>nlight, Mar 21, 2017, trustedCertEntry,</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>Certificate fingerprint (SHA1): XXXXXXXXX</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>default, Nov 30, 2016, SecretKeyEntry,</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>tirsantest.local, Apr 19, 2017, trustedCertEntry,</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:7.5pt'>Certificate fingerprint (SHA1): XXXXXXXXXXXX</span><span style='font-size:10.0pt'><o:p></o:p></span></p></div></div><div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt'>Could you help me? I am working on this problem for two weeks. <o:p></o:p></span></p></div></div></div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt'><br>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/ listinfo/midpoint</a><o:p></o:p></span></p></div></blockquote></div><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p></div></div></div><p class=MsoNormal><br><br><i>This email, and any attachment, is confidential and also privileged. If you have received it in error, please notify me immediately and delete it from your system along with any attachments. You should not copy or use it for any purpose, nor disclose its contents to any other person. </i><o:p></o:p></p></div></body></html>