[GLASSFISH-16105] Need to add iWS installed bin path for LB configurator to reconize the certutil and wadm command Created: 25/Feb/11  Updated: 25/Feb/11

Status: Open
Project: glassfish
Component/s: load_balancer
Affects Version/s: 3.1_b43
Fix Version/s: None

Type: Bug Priority: Trivial
Reporter: Homer Yau Assignee: kshitiz_saxena
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Windows 2008 R2, GlassFish 3.1, iPlanet Web Server 7.0.9,

Tags: 3_1, glassfish, plugin, rel_notes_candidate


If user do not setup the certutil.bat or wadm.bat in correct path in windows or other platforms, lb-configurator could not execute the command.

wadm.bat and certutil.bat command files are from webserver for helping lb-configurator to add the glassfish das certificate into truststore list in webserver instance as trusted certificate for admin easy of use purpose.


Load-balancer Configurator need these two files to complete the task.

Workaround is to execute the command manually after configurator completed install.



C:\webserver7\bin\certutil -A -a -n s1as -t TC -i C:\
\glassfish3\glassfish\domains\domain1\config\s1as.rfc -d C:\ha\ws7\https-myinstance\config

<webserver_install_dir>\bin\certutil A -a -n s1as -t TC -i <glassfish_3.1_install_dir>\glassfish3\glassfish\domains\domain1\config\s1as.rfc -d <webserver_install_dir>\https<your_instance>\config

s1as.rfc is the certificate exported from the GlassFish DAS.

Command to export GlassFish Domain Admin Server Certificate (GlassFish DAS certificate):
<JAVA_HOME>\bin\keytool -export -rfc -alias s1as -keystore <GLASSFISH_INSTALL_DIR>\domains\<DOMAIN_NAME>\config\keystore.jks -file s1as.rfc

Generated at Wed Jul 29 03:14:49 UTC 2015 using JIRA 6.2.3#6260-sha1:63ef1d6dac3f4f4d7db4c1effd405ba38ccdc558.