Need to install an SSL certificate for JasperServer plug-in to work?

[cbarlow3]

I posted on iReport forum also, since in my case this is about using the JasperServer plug-in, but since that topic really bridges two products, I'm posting here as well...

We recently changed our product so that it can only be reached through SSL with an https:// URL on port 8443 instead of an http:// URL on port 8080.  We're using a self-signed SSL certificate, and it's working fine for our main application.  I also don't have problems with iReport running previews against our database on the AIX server, because the DB2 database connection is on port 50000.

BUT...I've come to rely heavily on the convenience of the Repository Navigator pane provided by the JasperServer plug-in, and that requires that I configure a JasperServer URL to the repository, which used to be http://www.corelationlocal.com:8080/jasperserver-pro/services/repository.  Before I remembered to change anything, I got the following error:

Error:

; nested exception is:

Java.net.ConnectionException: Connection refused: connect

 

Not a big surprise, really.  When I try to change only the http to https and the 8080 to 8443, I get the following error:

Error:

; nexted exception is:

Javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

So I assume that JasperSoft has a problem with the self-signed SSL certificate, and I have no idea what my best course of action is--I have no experience with SSL certificates, by the way.  Is there something I can do on our AIX server to make JaspserSoft/Java happy with our self-signed SSL certificate (if so, how do I do it?) and/or are there reasonably simple steps I can follow to get a non-self-signed SSL certificate installed that will take care of this?

Carl

[cbarlow3]

I'm still unable to use iReport to test and install reports ever since we switched to an SSL connection. I can use it to author, but then I have to go into JasperReports Server to install and run. Any advice?

[Steve Park]

Hi cbarlow3,

 

Sorry it took so long to get an answer to your question.  You need to add the self-signed certificate to your local keystore.  You can add the key using the keytool command line program that comes with the JRE.  I believe the keystore iReport uses by default is the one in the <JRE_HOME>/lib/security/cacerts file.  Keep in mind if you're running iReport on a 64 bit Windows machine, iReport will use the 32 bit JRE, which is in C:Program Files (x86).  Good luck!

Steve

[sonny.ramsay]

I've added my self-signed cert to the cacerts file for both 32-bit and 64-bit JRE on my local machine but I'm still getting the same Java SSLHandshakeException above? Are these the same steps needed for Jaspersoft Studio to connect via SSL?