 | | | A concrete axis + ssl client example. | A concrete axis + ssl client example. 2006-06-19 - By Sai Arunachalam
Back
Hey Subir,
Can you provide some code or example for what you did...? I am looking
to implement a similar functionality.
Thanks,
Sai
On 6/19/06, subir.sasikumar@(protected) <subir.sasikumar@(protected)> wrote:
>
>
> Thanks manuel...
>
> I am using a self signed certificate and so I had to import my servers
> certificate (not issued by any CA, but me ;) ) into the truststore and
> change the default trust store as they are not available in the default CA
> file available in the JRE.. That is the reason that I set the truststore
> explicitly.... ofcourse I can import my servers certificate into the default
> file to avoid setting any properties related to trust store......you can say
> I do this for testing purpose....
>
> Thanks again for pointing out that.
> I thought you could have given a few links that discuss these things (SSL,
> Certificates in JAVA) in detail to help all of us in the group.
>
> Cheers
> -Subir S
> -- --Original Message-- --
> From: Manuel Mall [mailto:manuel@(protected)]
> Sent: Friday, June 16, 2006 9:08 PM
> To: axis-user@(protected)
> Subject: Re: A concrete axis + ssl client example.
>
> On Friday 16 June 2006 21:07, subir.sasikumar@(protected) wrote:
> > Hi,
> >
> > I guess if you use the stubs generated using WSDL2Java then there is
> > nothing much to do. Set the trust store property and trust store
> > password property before invoking the client. Just leave the other
> > properties as default it self.
> >
> > System.setProperty("javax.net.ssl.trustStore",
> > "c:\\TraceLogs\\tempstore.jks");
> > System.setProperty("javax.net.ssl.trustStorePassword", "temp123");
> >
> For client authentication you usually the the keyStore and
> keyStorePassword properties not the trustStore. The keyStore contains
> your key and the corresponding certificate presented to the server. The
> trustStore contains certificates of the servers you trust. Actually
> typically not the certificates itself but the CA certificates. The CA
> trustStore that comes with your JDK/JRE contains many of the commonly
> used CA certificates (Verisign and the like) and normally you don't
> need to make any changes to it.
>
> System.setProperty("javax.net.ssl.keyStore", "<path to
> keystore>");
>
> System.setProperty("javax.net.ssl.keyStorePassword", "<password>");
>
> works for me to use SSL client authentication.
>
> The biggest complication typically is to get your keyStore sorted out.
> The details of that depend on how you your private/public key pair and
> from that your certificate is issued to you. This topic is however way
> off this list.
>
> >
> > -Subir S
> >
> > -- --Original Message-- --
> > From: ip vp [mailto:ipvp@(protected)]
> >
> > Sent: Wednesday, June 14, 2006 6:56 PM
> > To: axis-user@(protected)
> > Subject: A concrete axis + ssl client example.
> >
> >
> >
> > Can somebody supply a concrete example of axis client accessing
> > webservice
> >
> > using ssl and a client certificate ?
> >
> >
> > regards
> >
>
> Manuel
>
> -- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
> To unsubscribe, e-mail: axis-user-unsubscribe@(protected)
> For additional commands, e-mail: axis-user-help@(protected)
>
>
>
> The information contained in this electronic message and any attachments
> to this message are intended for the exclusive use of the addressee(s) and
> may contain proprietary, confidential or privileged information. If you are
> not the intended recipient, you should not disseminate, distribute or copy
> this e-mail. Please notify the sender immediately and destroy all copies of
> this message and any attachments.
>
> WARNING: Computer viruses can be transmitted via email. The recipient
> should check this email and any attachments for the presence of viruses. The
> company accepts no liability for any damage caused by any virus transmitted
> by this email.
>
> www.wipro.com
>
> -- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
> To unsubscribe, e-mail: axis-user-unsubscribe@(protected)
> For additional commands, e-mail: axis-user-help@(protected)
>
>
Hey Subir,<br><br> Can you provide some code or example for
what you did...? I am looking to implement a similar functionality.<br><br
>Thanks,<br>Sai<br><br><div><span class="gmail_quote">On 6/19/06, <b class=
"gmail_sendername">
<a href="mailto:subir.sasikumar@(protected)">subir.sasikumar@(protected)</a></b>
<<a href="mailto:subir.sasikumar@(protected)">subir.sasikumar@(protected)</a>>
wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb
(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>Thanks manuel...<br><br>I am using a self signed certificate and so I had
to import my servers certificate (not issued by any CA, but me ;) ) into the
truststore and change the default trust store as they are not available in the
default CA file available in the JRE.. That is the reason that I set the
truststore explicitly.... ofcourse I can import my servers certificate into the
default file to avoid setting any properties related to trust store......you
can say I do this for testing purpose....
<br><br>Thanks again for pointing out that.<br>I thought you could have given a
few links that discuss these things (SSL, Certificates in JAVA) in detail to
help all of us in the group.<br><br>Cheers<br>-Subir S<br>-- --Original Message
-- --
<br>From: Manuel Mall [mailto:<a href="mailto:manuel@(protected)">manuel@(protected)
.org</a>]<br>Sent: Friday, June 16, 2006 9:08 PM<br>To: <a href="mailto:axis
-user@(protected)">axis-user@(protected)</a><br>Subject: Re: A concrete axis
+ ssl client example.
<br><br>On Friday 16 June 2006 21:07, <a href="mailto:subir.sasikumar@(protected)
">subir.sasikumar@(protected)</a> wrote:<br>> Hi,<br>><br>> I guess if
you use the stubs generated using WSDL2Java then there is<br>> nothing much
to do. Set the trust store property and trust store
<br>> password property before invoking the client. Just leave the other<br>
> properties as default it self.<br>><br>>  
; System.setProperty("javax.net.ssl.trustStore",<br>
> "c:\\TraceLogs\\tempstore.jks");
<br>> System.setProperty("javax.net.ssl.trustStorePassword", "
;temp123");<br>><br>For client authentication you usually the the
keyStore and<br>keyStorePassword properties not the trustStore. The keyStore
contains
<br>your key and the corresponding certificate presented to the server. The<br
>trustStore contains certificates of the servers you trust. Actually<br
>typically not the certificates itself but the CA certificates. The CA<br>
trustStore that comes with your JDK/JRE contains many of the commonly<br>used
CA certificates (Verisign and the like) and normally you don't<br>need to make
any changes to it.<br><br> System.setProperty("javax.net.ssl
.keyStore
", "<path to<br>keystore>");<br> <br>System
.setProperty("javax.net.ssl.keyStorePassword", "<password>
");<br><br>works for me to use SSL client authentication.<br><br>The
biggest complication typically is to get your keyStore sorted out.
<br>The details of that depend on how you your private/public key pair and<br
>from that your certificate is issued to you. This topic is however way<br>off
this list.<br><br>><br>> -Subir S<br>><br>> -- --Original Message--
---
<br>> From: ip vp [mailto:<a href="mailto:ipvp@(protected)">ipvp@(protected)
</a>]<br>><br>> Sent: Wednesday, June 14, 2006 6:56 PM<br>> To: <a href
="mailto:axis-user@(protected)">axis-user@(protected)</a><br>
> Subject: A concrete axis + ssl client example.<br>><br>><br>><br>
> Can somebody supply a concrete example of axis client accessing<br>>
webservice<br>><br>> using ssl and a client certificate ?<br>
><br>><br>> regards<br>><br><br>Manuel<br><br>-- ---- ---- ---- ---
-- ---- ---- ---- ---- ---- ---- ---- ---- -----<br>To unsubscribe, e-mail: <a
href="mailto:axis-user-unsubscribe@(protected)">axis-user-unsubscribe@(protected)
.apache.org
</a><br>For additional commands, e-mail: <a href="mailto:axis-user-help@(protected)
.apache.org">axis-user-help@(protected)</a><br><br><br><br>The information
contained in this electronic message and any attachments to this message are
intended for the exclusive use of the addressee(s) and may contain proprietary,
confidential or privileged information. If you are not the intended recipient,
you should not disseminate, distribute or copy this e-mail. Please notify the
sender immediately and destroy all copies of this message and any attachments.
<br><br>WARNING: Computer viruses can be transmitted via email. The recipient
should check this email and any attachments for the presence of viruses. The
company accepts no liability for any damage caused by any virus transmitted by
this email.
<br><br><a href="http://www.wipro.com">www.wipro.com</a><br><br>-- ---- ---- --
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------<br>To unsubscribe, e-mail
: <a href="mailto:axis-user-unsubscribe@(protected)">axis-user-unsubscribe@(protected)
.apache.org
</a><br>For additional commands, e-mail: <a href="mailto:axis-user-help@(protected)
.apache.org">axis-user-help@(protected)</a><br><br></blockquote></div><br>
|
|
|