問(wèn):

沒(méi)有RootCA如何通過(guò)證書(shū)驗(yàn)證?? No Way yet !

問(wèn):

沒(méi)有中間子證書(shū)但是有RootCA如何通過(guò)證書(shū)驗(yàn)證:

java.property.com.tibco.security.NoExplicitCAChain=true

All the properties worthy tests are like below:

-------------------------------------------------------------------------------------

?java.property.com.tibco.security.NoExplicitCAChain=true

?java.property.com.tibco.security.CheckRevocation=true

?java.property.com.tibco.security.EntrustLast=true

?java.property.TIBCO_SECURITY_VENDOR=j2se

-------------------------------------------------------------------------------------

Please find the answers inline.

1. Our goal is to keep only root CA certificate in the trust folder and remove all server/client cert and intermediate certs. Can we accomplish this by setting the below property in the bw app .tra file?

java.property.com.tibco.security.NoExplicitCAChain=true

Yes, in general BW has an explicit trust model. i.e. client would only establish an SSL connection if it was able to verify a full chain of trust from the server's certificate to a? root certificate. By setting NoExplicitCAChain to true, we can work around the explicit model, which will not require the full certificate chain to be present.

2. What is the benefit of the below property?

#enable revocation checks

java.property.com.tibco.security.CheckRevocation=true

-------------------------------------------------------------------------------------