Thanks for the information. I use Tomcat 4.1.18 so I hope it will be fine. Best regards, Matthias
-----Ursprüngliche Nachricht----- Von: Michael Roytman [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 3. April 2003 18:10 An: '[EMAIL PROTECTED]' Betreff: RE: SSL Security with Axis 1.0 ??? I think this is a bug related to Tomcat version, not Axis. SSL works fine but Tomcat would throw the following exception on each SSL connection: Apr 3, 2003 9:58:39 AM org.apache.coyote.http11.Http11Processor action WARNING: Exception getting SSL attributes javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(DashoA62 75) at org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain(JSSESupport.j ava:118) at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:543) at org.apache.coyote.Response.action(Response.java:216) at org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(CoyoteAdapter.java: 314) at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:221) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:405) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConne ction(Htt p11Protocol.java:380) at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:508) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.jav a:533) at java.lang.Thread.run(Thread.java:536) This is fixed in Tomcat 4.1.18. Michael -----Original Message----- From: "Geiß, Matthias" [mailto:[EMAIL PROTECTED] Sent: Thursday, April 03, 2003 8:02 AM To: ' ([EMAIL PROTECTED])' Subject: SSL Security with Axis 1.0 ??? Hi, I just read the IBM developerworks article about securing web services with SSL using Axis and Tomcat. http://www-106.ibm.com/developerworks/webservices/library/ws-sec1.html It contains the folling advice about the tools to use: "Soap client/server: Apache Axis v1.0 Beta 3 (Note: Release version has a bug relating to the use of SSL)" Is this corret? Am I forced to use something different from the Axis Release 1.0 (that's what I do at the moment)? Best regards, Matthias
