Hey Subir,

Thanks for your response.

Can you provide a sample code ?

regards,

IPVP

From: "Sai Arunachalam" <[EMAIL PROTECTED]>
Reply-To: axis-user@ws.apache.org
To: axis-user@ws.apache.org
Subject: Re: A concrete axis + ssl client example.
Date: Mon, 19 Jun 2006 13:31:06 +0530

Hey Subir,

   Can you provide some code or example for what you did...? I am looking
to implement a similar functionality.

Thanks,
Sai

On 6/19/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:


Thanks manuel...

I am using a self signed certificate and so I had to import my servers
certificate (not issued by any CA, but me ;) ) into the truststore and
change the default trust store as they are not available in the default CA
file available in the JRE.. That is the reason that I set the truststore
explicitly.... ofcourse I can import my servers certificate into the default file to avoid setting any properties related to trust store......you can say
I do this for testing purpose....

Thanks again for pointing out that.
I thought you could have given a few links that discuss these things (SSL,
Certificates in JAVA) in detail to help all of us in the group.

Cheers
-Subir S
-----Original Message-----
From: Manuel Mall [mailto:[EMAIL PROTECTED]
Sent: Friday, June 16, 2006 9:08 PM
To: axis-user@ws.apache.org
Subject: Re: A concrete axis + ssl client example.

On Friday 16 June 2006 21:07, [EMAIL PROTECTED] wrote:
> Hi,
>
> I guess if you use the stubs generated using WSDL2Java then there is
> nothing much to do. Set the trust store property and trust store
> password property before invoking the client. Just leave the other
> properties as default it self.
>
>         System.setProperty("javax.net.ssl.trustStore",
> "c:\\TraceLogs\\tempstore.jks");
> System.setProperty("javax.net.ssl.trustStorePassword", "temp123");
>
For client authentication you usually the the keyStore and
keyStorePassword properties not the trustStore. The keyStore contains
your key and the corresponding certificate presented to the server. The
trustStore contains certificates of the servers you trust. Actually
typically not the certificates itself but the CA certificates. The CA
trustStore that comes with your JDK/JRE contains many of the commonly
used CA certificates (Verisign and the like) and normally you don't
need to make any changes to it.

  System.setProperty("javax.net.ssl.keyStore", "<path to
keystore>");

System.setProperty("javax.net.ssl.keyStorePassword", "<password>");

works for me to use SSL client authentication.

The biggest complication typically is to get your keyStore sorted out.
The details of that depend on how you your private/public key pair and
from that your certificate is issued to you. This topic is however way
off this list.

>
> -Subir S
>
> -----Original Message-----
> From: ip vp [mailto:[EMAIL PROTECTED]
>
> Sent: Wednesday, June 14, 2006 6:56 PM
> To: axis-user@ws.apache.org
> Subject: A concrete axis + ssl client example.
>
>
>
> Can somebody supply a concrete example of axis client accessing
> webservice
>
> using ssl and a client certificate ?
>
>
> regards
>

Manuel

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



The information contained in this electronic message and any attachments
to this message are intended for the exclusive use of the addressee(s) and
may contain proprietary, confidential or privileged information. If you are
not the intended recipient, you should not disseminate, distribute or copy
this e-mail. Please notify the sender immediately and destroy all copies of
this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient
should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted
by this email.

www.wipro.com

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



_________________________________________________________________
Seja um dos primeiros a testar o novo Windows Live Mail Beta- grĂ¡tis. Acesse http://www.ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-4911fb2b2e6d


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to