Hello team, I am trying to integrate OIDC authenti...
# ingestionr
rhythmic-sundown-12093
11/08/2021, 3:16 AMHello team, I am trying to integrate OIDC authentication, our company has its own OIDC service, but it is accessed using https, how can I add a third party certificate in datahub, Thanks!
b
big-carpet-38439
11/08/2021, 6:43 PMHi there! What exactly is the problem? Does the OIDC service require a client cert?
r
rhythmic-sundown-12093
11/09/2021, 6:42 AM@big-carpet-38439 Hi, We configured our own OIDC service when starting datahub-frontend-react, and then reported an error when accessing localhost:9002
b
big-carpet-38439
11/09/2021, 6:48 AMGot it - Yes it seems that our java client is not able to trust the certificate signer here. I think there should be a way to configure a custom trust store for a java service (maybe via the command line?) - It's something we are interested to support but have not yet encountered this. Do you think you'd be able to help us investigate further?
big-carpet-38439
11/09/2021, 6:54 AMI think if we launch the java process with the following properties we may get somewhere:
Copy code
-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/path/ks-name
-Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/path/ts-namer
rhythmic-sundown-12093
11/09/2021, 7:10 AMIt's a bit complicated, I'm wondering if there's any way to skip this verification
b
big-carpet-38439
11/09/2021, 3:18 PMNot that I’m aware of - this would be low level Java security right?
3 Views