OpenSSO (OpenAM) Test Configuration- Fails with https

[Jim Somerville, modifié il y a 10 années.]

I am trying to integrate OpenAM 10.1 login with Liferay 6.1 in the Control Panel's Portal Settings. When entering the required information and clicking Test OpenSSO Configuration fails when using https URLs to OpenAM (e.g. "https://gdx2.kci.com/openam...").

The OpenAM server has a valid wildcard domain SSL certificate from GoDaddy, and I have confirmed connectivity between the Liferay server and OpenAM server. In OpenAM I enabled Encode Cookie Value. And, I can login fine to OpenAM over https. See attachment OpenSSO_https.PNG for settings (shown below).

When changing the URLs to http (both ports 80 and 443 are open and allowed for now) the Test says it connected successfully. See attachment OpenSSO_http.PNG for settings (shown below).

Any ideas why https would not work? Do I need to import the SSL certificate somewhere into Liferay? Or, is it a bug? Thank you.

[Mika Koivisto, modifié il y a 10 années.]

Sounds like java doesn't trust the certificate from GoDaddy so you might need to establish that trust manually. You'll do that by importing the certificate to the truststore.

[Marco Kropivsek, modifié il y a 10 années.]

Could you check the certificate name? I had the same problem and adding the certificate to the Jave keystore did not solve it. Changing the common name of my certificate key to the name of the server, I could successfully connect to OpenSSO using HTTPS.

[Ana Maria Teodorescu, modifié il y a 9 années.]

Hi Jim,

I am having exactly the same problem..
Cannot connect to the open sso server if it is over https...
It works only if it is over http.
how did you solve this problem?
Thank you,
Ana

[Mika Koivisto, modifié il y a 9 années.]

Try to establish trust by following instructions in this blog post.