Designer SSL Client Certificates

Ignition
,
1

Just upgraded to 8.1.43 and having a heck of a time with SSL when using HTTPClient() in designer script console.

We had all the supplemental certs installed on both the Designer Launcher and on the gateway. I have cleared all the local cache on my machine and re-installed the designer launcher, but no matter what I do it seems to download a JRE from the server without my custom internal Certs.

The launcher works fine as its using the system cert store. The GW is fine as well. I tried setting the custom.jre.path setting in the launcher config but then the login button on the designer just does nothing.

Is something mis-configured? How can I get the designer to do what it used to and just use the jre bundled with the launcher and respect the certificates in clientlauncher-data folder.

2

Try setting the trust store property to system in the application config?

That way the launcher 'injects' the appropriate security context into the actual launched designer/client, which is what's used by system.net.httpClient.

At least, in theory :man_shrugging:

3

Yeah, already have "trust.store": "system" in my setup :frowning: Maybe that "injection" is broken?

Also a __JAVA_OPTION system entry as a fallback for all my other java apps that have issues with our internal security stuff

image