JBoss as Web service client - SSL - keystore/truststore setup

[Dejan Mratinkovic]

I have JBoss server EJB3 application acting both as Server and Client (communicating with many other servers).

I have security transport set up. More or less implemented as advised on: http://jbossws.jboss.org/mediawiki/index.php?title=Secure_transport

I have "client" Jboss keystore/truststore set up as system properties. That works fine as long as I have single application running on Jboss.

But, is there another way to set up client keystore/truststore, application specific? Is there a way to have more than one keystores per Jboss, so each web service client application can have its own?

I am consuming web services using EJB3 @WebServiceRef annotation.

Thanks.

[greg stark]

I am not familiar with the run-time structure of the JBoss environment, but in general, the relevant system properties for truststore and keystore are only read once per JVM invocation; changing them has no effect after they are read. The only other methods I know of for customizing these are explained in the JSSE Reference Guide.

[Ravi Natarajan]

Can you please let me know how you had successfully setup client-side trust-store in JBOSS ?

I have the similar scenario. My JBOSS server connects to other servers via HTTPS and now one such URL it cannot connect. So, I have obtained the public cert from the server into a client.truststore. Now, this client.truststore should be installed in the JBOSS so that it trusts the server it connects to.

hence, please let me know how you made it work successfully.

thanks in advance.