Getting Secure store not configured error

We created a new Target server in the test environment. It is called targetserver-2waytls and needs to have two way TLS with our backend servers. We created the TargetServer and updated it for the two way TLS with the management API, but it looks like it doesn't see the keystore for some reason.

We get the following error:

{"fault":{"faultstring":"Security store myKeystore-ref is not configured in environment test","detail":{"errorcode":"messaging.runtime.SecurityStoreNotConfigured"}}}

Can you please check why are we getting this error ?

Solved Solved
0 1 445
1 ACCEPTED SOLUTION

  1. Checked the definition of the target server targetserver-2waytls, specifically the SSLInfo section and noticed that the keystore did not have a valid value.
    "sSLInfo" : { 
    "ciphers" : [ ], 
    "clientAuthEnabled" : "true", 
    "enabled" : "true", 
    "ignoreValidationErrors" : false, 
    "keyAlias" : "myKeystore", 
    "keyStore" : "myeyStore-ref", 
    "protocols" : [ "TLSv1.2" ], 
    "trustStore" : "myTruststore-ref" 
    }
    	
  2. There's no keystore by name "myKeyStore-ref". It should be a reference so the line
    "keyStore" : "devMobileKeyStore-ref"
    	
    should be modified as follows:
    "keyStore" : "ref://myKeyStore-ref"
    	
  3. Similarly the trustStore line should be modified as follows
    "trustStore" : "ref://myTruststore-ref"
    	
Post this change, we did not get this error. Please note, the Keystore and Truststore reference should always have the prefix "ref://" in the SSLInfo section of Target Server and Virtual Host definitions.

View solution in original post

1 REPLY 1

  1. Checked the definition of the target server targetserver-2waytls, specifically the SSLInfo section and noticed that the keystore did not have a valid value.
    "sSLInfo" : { 
    "ciphers" : [ ], 
    "clientAuthEnabled" : "true", 
    "enabled" : "true", 
    "ignoreValidationErrors" : false, 
    "keyAlias" : "myKeystore", 
    "keyStore" : "myeyStore-ref", 
    "protocols" : [ "TLSv1.2" ], 
    "trustStore" : "myTruststore-ref" 
    }
    	
  2. There's no keystore by name "myKeyStore-ref". It should be a reference so the line
    "keyStore" : "devMobileKeyStore-ref"
    	
    should be modified as follows:
    "keyStore" : "ref://myKeyStore-ref"
    	
  3. Similarly the trustStore line should be modified as follows
    "trustStore" : "ref://myTruststore-ref"
    	
Post this change, we did not get this error. Please note, the Keystore and Truststore reference should always have the prefix "ref://" in the SSLInfo section of Target Server and Virtual Host definitions.