Tuesday, 14 February 2012

webMethods: do I have the top level issuer cert in java for linux?

Let's say your cert is signed by "Geotrust Global CA"

/usr/java/jdk1.6.0_18/jre/bin/keytool -list -v -keystore /opt/softwareag/jvm/linux160_64/jre/lib/security/cacerts | grep geo
hit return when prompted for PW

Enter keystore password:
Alias name: geotrustuniversalca
Alias name: geotrustprimaryca
Alias name: geotrustglobalca
Alias name: geotrustprimarycag3


WGET v CURL username password negotiate: cant we all just wget along?

Sometimes, for unmentioned reasons, CURL gets an auth error where wget doesn't. It happens in webMethods if a service allows Anonymous access and the user is providing an invalid username with the error e.g. Access denied for user lol on port 5555.

E.g.
wget http://lol:what@google.com OK
curl http://lol:what@google.com returns auth error

Auth no challenge uses the same protocol as curl to login:
wget --auth-no-challenge http://lol:what@google.com auth failed