Using the FAST Content API with Sharepoint 2010 requires a SSL client certificate . At least that's what I understand from this error message"
Http error: HTTP/1.1 403 Could not verify client certificate.
I can configure my client to use a SSL certificate, but how do I import that into FAST? Since the content API ports are not handled by IIS, I can only assume that this is a FAST-specific configuration procedure.
Update: I've made the following steps:
- Generated a public+private key pair with the Java
- I've converted that keystore to to a PCKS12 (PFX) keystore which can be imported by Windows
- I've tried to import the keystore using the instructions for setting up SSL between FAST and Sharepoint, but I get a cryptic error
I can't make heads or tails of this but I can confirm that the certificate is installed alongside the
FastSearchCert certificate in the Certificates (Local Computer) -> Personal -> Certificates Snap-In.
Note that the FAST machine is part of an AD, while the machine which generated the certificate is not.
PS C:\FASTSearch\Installer\scripts> .\securefastsearchconnector.ps1 -certPath c:\windows\temp\java-client-cert.pfx -ssaName FASTContent -username "CORP\Administrator" Enter the certificate password: ******** Installed certificate. Could not set access rights on certificates private keys. Script can be rerun to only set access rights when reason for error is detected. Get-Acl : Cannot find path 'C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6c8c8677fca4d588e808522374fc60aa_6c6a2f58-dc6a-42a6-80ac-19d3b57cafb5' because it does not exist. At C:\FASTSearch\Installer\scripts\securefastsearchconnector.ps1:157 char:17 + $acl = Get-Acl <<<< $keypath$keyname + CategoryInfo : ObjectNotFound: (:) [Get-Acl], ItemNotFoundException + FullyQualifiedErrorId : GetAcl_PathNotFound_Exception,Microsoft.PowerShell.Commands.GetAclCommand