Unable to configure Acrobat to connect to LiveCycle RM due to SSL protocol error

[g5spark]

I am getting the following error when i try and configure Acrobat to connect to the LiveCycle RM server.

Unable to connect to the service at: https://<host>:443

SSL protocol error.  Certificate is either invalid or common name or authority are not recognized. If this problem persists, contact an administator for assistance.

When I setup SSL on JBOSS, we used a self signed certificate using JDK keytool.  I can confirm that SSL is properly setup on JBOSS.   Typing https://<host>:443 in a browser brings me to the JBOSS page.  Also https://<host>:443/edc brings up the Rights mgmt UI.

Does this mean, I wont be able to test without an real cert from a CA like Entrust?

Also, What is User Name/Password for on the configuration menu?  Is it a login into livecycle?  or for the cert?

[Jasmin_Charbonn]

This should work with a self-sign cert.

First make sure you add the cert to the trust store of your browser. When you type https://<host>:443, do you get a prompt to add the cert?

The other thing you need to do is set the Base URL properly in the admnui. Login to the adminui with administrator/password and go under Services/LC Rights Management ES2/Configuration/Server Configuration and make sure the Base URL is set to https://<host>:443.

Then save and apply a new policy to your document and try again.

Jasmin

[g5spark]

When I type https://<host>/443, I get the mesg

There is a problem with this website's security certificate.

We recommend that you close the webpage and do not continue to this website.

I click, Continue to this website (not recommended)

Which takes me to the JBOSS page.

The Certificate error that shows up on the url field in IE7 is

Mismatch Address

The security certificate presented by this website was issued for a different website's address.

I try installing the cert into the Personal and Trusted Root Certification Authorities.

But I still get a bad cert. error

I have already added the base URL in the admin UI.

[Jasmin_Charbonn · Accepted solution]

You need to make sure the host (https://<host>/443) is the same as the one you specified when you created the keystore. Don't use localhost.

Jasmin

[g5spark]

When i created the keystore, the first question is:

What is your first and last name?

I had to enter the domain name (it has to be the same as the JBOSS server address) instead of my actual name.