Instant Messaging - Java Keystore and Functionality (Doc ID 2524437.1)

Last updated on OCTOBER 11, 2023

Applies to:

Goal

Have the keystore.jks that has self-signed cert along with it's root cert.

This is a question on whether the Instant Messaging (IM) application trusts the java cacerts keystore that is installed with java.

If iim_server.trust_all_cert is set to 'true', the server trusts all certificates, including expired and self-signed certificates, and also adds the certificate information into the log files.  If it is set to 'false', the server do not log certificate information and trusts only valid certificates signed by a CA.

By setting this to 'false', does it lead the IM app to not look in the Java keystore or does the IM app not look there by default?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.