<html><head>
</head>
<body style="margin-bottom:45px">
<div style="font-size: 10pt;"><div dir="ltr" style="margin-top:0;margin-bottom:0;">Thank you for your reply, i created keystore manually with wiki evolveum Keysotore Configuration document. I dont know how if midpoint creates keystore by itself, automatically.</div></div><div style="font-size: 10pt;"><div id="LGEmailHeader" dir="ltr" style="margin-top:0;margin-bottom:0;"><div dir="ltr" style="margin-top:0;margin-bottom:0;"><br></div><div dir="ltr" style="margin-top:0;margin-bottom:0;">------ Original message------</div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><b>From: </b>Jason Everling<jeverling@bshp.edu></jeverling@bshp.edu></div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><b>Date: </b>Mon, Apr 24, 2017 18:41</div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><b>To: </b>midPoint General Discussion;</div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><b>Cc: </b></div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><b>Subject:</b>Re: [midPoint] Fwd: AD configuration with LDAP Connector, ssl issue</div><div dir="ltr" style="margin-top:0;margin-bottom:0;"><br></div></div><div dir="ltr">From what I can see, it is showing 'unsupported ciphersuite' along with other ssl/tls startup errors. Did you let midpoint create the keystore when it first started up or did you manually create it? The midpoint team should be able to help further but I have never encountered that error before with midpoint. Only ssl chain errors which is easily fixed and I dont see that in your logs.<div dir="ltr"><br></div><div class="gmail_extra" dir="ltr"><br clear="all"><div dir="ltr"><div class="gmail_signature" data-smartmail="gmail_signature" dir="ltr"><div dir="ltr">JASON</div></div></div><br><div class="gmail_quote" dir="ltr">On Mon, Apr 24, 2017 at 7:26 AM, Dilek Gider <span dir="ltr"><<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Again,<div dir="ltr"><br></div><div dir="ltr">Is there anybody to help me please.. Details are below.</div><div dir="ltr"><br><div class="gmail_quote" dir="ltr">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Dilek Gider</b> <span dir="ltr"><<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>></span><br>Date: Thu, Apr 20, 2017 at 4:20 PM<br>Subject: AD configuration with LDAP Connector, ssl issue<br>To: midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br><br><br><div dir="ltr">Hi ,<div dir="ltr"><br></div><div dir="ltr">I have resource to AD from midpoint, with LDAP Connector. You can find resource.xml as attchment. I couldn't connect this resource with LDAP via SSL. I followed </div><div dir="ltr"><br></div><div dir="ltr"><a href="https://wiki.evolveum.com/display/midPoint/Keystore+Configuration" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Keystore+Configur<wbr>ation</a> </div><div dir="ltr"><br></div><div dir="ltr">link, added Tomcat java options but it doens't work. Also I added logs about this resource, error logs. </div><div dir="ltr"><br></div><div dir="ltr">I wrote java jar to connect AD via ssl and execute it from the same location with my java connector, it succeeded. But in midpoint it could not communicate with AD via SSL. Without SSL, it is communicating with AD from LDAPConnector.</div><div dir="ltr"><br></div><div dir="ltr">I have java 8_101, tomcat 8.5.</div><div dir="ltr">I have certificate as "cer" file, I imported to both java cacerts and midpoint keystore. and it is listed with my alias: </div><div dir="ltr"><div dir="ltr"><font size="1">Keystore type: JCEKS</font></div><div dir="ltr"><font size="1">Keystore provider: SunJCE</font></div><div dir="ltr"><font size="1"><br></font></div><div dir="ltr"><font size="1">Your keystore contains 3 entries</font></div><div dir="ltr"><font size="1"><br></font></div><div dir="ltr"><font size="1">nlight, Mar 21, 2017, trustedCertEntry,</font></div><div dir="ltr"><font size="1">Certificate fingerprint (SHA1): XXXXXXXXX</font></div><div dir="ltr"><font size="1">default, Nov 30, 2016, SecretKeyEntry,</font></div><div dir="ltr"><font size="1">tirsantest.local, Apr 19, 2017, trustedCertEntry,</font></div><div dir="ltr"><font size="1">Certificate fingerprint (SHA1): XXXXXXXXXXXX</font></div></div><div dir="ltr"><br></div><div dir="ltr">Could you help me? I am working on this problem for two weeks. </div></div></div><br></div></div><br>______________________________<wbr>_________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br><br></blockquote></div><br></div></div></div>
</body></html>