How to configure smtp.agent.config.xml for resolving public certs via LDAP

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

How to configure smtp.agent.config.xml for resolving public certs via LDAP

greggurr
I am trying to test my CONNECT implementation of Direct with the TTT testing tool and the DCDT tool. One test needs to be able to discover the certificate of the Direct message recipient via LDAP.

I am assuming I do this via the "smtp.agent.config.xml" file. In this file I see the following:

<PublicCertStores>
        <PublicCertStore type="Keystore" file="/nhin/glassfish3/glassfish/domains/domain1/config/publiccerts.jks" filePass="changeit" privKeyPass="changeit"/>
         <PublicCertStore type="DNS" />
  </PublicCertStores>

The example above shows using a local "keystore" and "DNS" methods to resolve public certs.  I know there is a third option to use "LDAP" to resolve public certs (the LDAP info is obtained via a "SRV" in the DNS).

I tried adding:
    <PublicCertStore type="LDAP" />

but that was not successful in invoking a LDAP cert resolver in the CONNECT/Direct code.

Can someone tell me how I configure the "smtp.agent.config.xml" to use LDAP for resolving public certs?

Thanks