Nuria,
Yes, when your client call a an EPR with https, your client need to able to
trust the certificate from that site.  Basically you need to put the
certificate into a key store for your client side code to use. I am new to
Axis 2 too, I don't know if Axis2 client support the configuration
of keys store.  It is similar to the what web browser acts  when you firste
time visit an https  site.  It alert you if you want to trust the site
and/or install the certificate from site. If you bowser end up installing
the certificate, then next time you visit the site, the alert won't come up.

I don't remember all the details about validating a cerfiteicate agains a
key store. But you can simpley goolge it.
Regards,
Jack



On 3/3/08, Nuria Rodríguez García <[EMAIL PROTECTED]> wrote:
>
> Hello:
>
>
>
> I'm using Axis2 and I need to use SSL to connect to a WS.
>
> In server side I do the following:
>
>
>
>             I configure the server.xml file in tomcat. I have:
>
>                         <Connector port="8443"
>
>                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>
>                enableLookups="false" disableUploadTimeout="true"
>
>                acceptCount="100" debug="0" scheme="https" secure="true"
>
>                clientAuth="false" sslProtocol="TLS" />
>
>
>
>             Then I generate a server certificate doing the following:
>
>                         keytool -genkey -alias tomcat -keyalg RSA
>
>                         keytool -export -alias tomcat -storepass changeit
> -file server.cer
>
>                         keytool -import -v -trustcacerts -alias tomcat
> -file server.cer -keystore %JAVA_HOME%/jre/lib/security/cacerts -keypass
> changeit -storepass changeit
>
>
>
>             I start-up tomcat and when I call the service using the EPR "
> https://mymachine:8443/ ...." I receive the following exception:
>
>
>
>                         I/O exception (org.apache.axis2.AxisFault) caught
> when processing request: *sun.security.validator.ValidatorException*: PKIX
> path building failed: *
> sun.security.provider.certpath.SunCertPathBuilderException*: unable to
> find valid certification path to requested target
>
>
>
> I don't know if I need to indicate something from the client side.
>
>
>
> Thanks,
>
> Nuria
>



-- 

Some people lived like they will never die
and died like they have never lived

Reply via email to