Skip to Main Content
Cloud Platform


This is an IBM Automation portal for Cloud Platform products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


Status Functionality already exists
Workspace WebSphere Liberty
Created by Guest
Created on Apr 17, 2023

中間証明書のピン留め機能の追加

AzureAD認証に必要となる中間証明書のピン留め機能の追加をリクエストします。

Idea priority High
  • Guest
    Reply
    |
    Jun 8, 2023

    本件は、下記の設定と、

    • -Dcom.ibm.ssl.performURLHostNameVerification=false

    ルート証明書と中間証明書をトラストストアに入れることで、SSL通信を行うことが出来たとのご連絡を頂きました。解決策をシェアしていただいて感謝いたします。


    This Aha idea was about adding “certificate pinning” function for the Azure AD certificate authentication.

    The customer later updated us that they were able to achieve successful certificate authentication by configuring the "-Dcom.ibm.ssl.performURLHostNameVerification=false" option and incorporating the intermediate and root certificates into the Liberty truststore,

    We would like to express our appreciation to the customer for sharing the solution.


  • Guest
    Reply
    |
    May 15, 2023

    リクエストありがとうございます。レポートされた問題は、現在サポートケース(TS012357156)にて調査中です。お客様にサーバーを再起動いただいたところ、問題が見られなくなったことから、「ピン留め機能」ではなく別の解決策があるのでは、という方向で引き続き調査を進めさせていただいています。こちらのAhaアイデアは、サポートケースの調査中、一旦クローズさせていただく可能性もございます。どうぞよろしくお願いいたします。