Re: Difficulty changing JVM with WSDL2Java

ANDREW MICONE Thu, 13 Jan 2005 07:58:52 -0800

It's hard to tell from the stack trace, but maybe there's a difference in what 
certificates are stored in either your keystore or between the two JVM's.


The first thing I'd check is if you have your own keystore (a .keystore file in 
your home directory or wherever you specified). You might have ported your 
software from one machine from another and forgotten to move it as well. Also, 
if you run the J2EE container with jsvc  under another UID, that user's home 
directory will become the default directory for where the keystore is 
installed. 

Second, there are differences in the cacerts file between 1.42 and 1.5. You 
could backup your cacerts file in jre/lib/security and then copy the cacerts 
from 1.5 into that directory and try again. That will update your 1.42 to have 
all the trusted certificates used in J2EE 1.5.

-- Andy

>>> [EMAIL PROTECTED] 01/13/05 12:57AM >>>
Hi,

Presently I have a web service client *working* that was
developed using the j2sdk1.5.0. I have been told that
I must provide this functionality but using a JVM no older
than 1.4.2 (in production it will be running on HP Tru64 and
the sysadm folks told me that 1.5.0 wasn't available for this
platform...sigh).

The site I'm assessing is using https and basic auth for security.
Remember that I have access and functionality working with the
JVM 1.5.0 version.

I played it safe by rerunning the WSDL2Java tool for the client
stubs using the older JVM. I created the new project in eclipse, 
changed the jre version to 1.4.2 and have the external jar project 
path settings the same as the working version, ie, axis libs, oracle
libs, quartz libs etc. I imported the new stub files generated with
1.4.2 the existing home-grown files using eclipses' file import.
The JAVA_HOME variable was changed to point to the jre1.4.2 although
this should not affect running within eclipse anyway? 

Upon running the client, I get the stacktrace (provided below).
I have checked:
1)      The generated stub code - used Araxis merge...the files 
      are identical
2)      The eclipse libraries list for the project...the same
        except the the jvm version (the point to the same axis
        libraries)
I even tried just importing the working project as a file import
and changing the jvm, all to no avail.

Would appreciate any input on what it could be.

<stackTrace>javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: No trusted certificate
found&#13;
        at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(Unknown
Source)&#13;
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(Unknown
Source)&#13;
        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown
Source)&#13;
        at
org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactor
y.java:186)&#13;
        at
org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:131)
&#13;
        at
org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:
370)&#13;
        at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:88)&#13
;
        at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.j
ava:32)&#13;
        at
org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)&#13;
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)&#13;
        at
org.apache.axis.client.AxisClient.invoke(AxisClient.java:147)&#13;
        at org.apache.axis.client.Call.invokeEngine(Call.java:2719)&#13;
        at org.apache.axis.client.Call.invoke(Call.java:2702)&#13;
        at org.apache.axis.client.Call.invoke(Call.java:2378)&#13;
        at org.apache.axis.client.Call.invoke(Call.java:2301)&#13;
        at org.apache.axis.client.Call.invoke(Call.java:1758)&#13;
        at
au.gov.dest.Heims.Admin.BatchServiceSoapStub.getBatchCallStatus(BatchSer
viceSoapStub.java:391)&#13;
        at
au.edu.cqu.heims.ServicePoller.pollBatchStatus(ServicePoller.java:93)&#1
3;
        at
au.edu.cqu.heims.ServicePoller.execute(ServicePoller.java:56)&#13;
        at org.quartz.core.JobRunShell.run(JobRunShell.java:191)&#13;
        at
org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java
:516)&#13;
      Caused by: sun.security.validator.ValidatorException: No trusted
certificate found&#13;
        at
sun.security.validator.SimpleValidator.buildTrustedChain(Unknown
Source)&#13;
        at sun.security.validator.SimpleValidator.engineValidate(Unknown
Source)&#13;
        at sun.security.validator.Validator.validate(Unknown
Source)&#13;
        at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unk
nown Source)&#13;
        at
com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(Unk
nown Source)&#13;
        ... 24 more&#13;
</stackTrace>

The home-grown stuff has a package of au.edu.cqu.heims...
The stub files have au.gov.dest.Heims...

I have spent 8 hrs troubleshooting this. Any help would be very much
appreciated.

Cheers, 

______________________________________

Mike Squires
Analyst/Programmer/Web Developer
Corporate Information Systems
Information Technology Division
Central Queensland University

______________________________________

Ph:    +61 7 4930 6872
Fax:   +61 7 4930 9254
email: [EMAIL PROTECTED] 

______________________________________

Re: Difficulty changing JVM with WSDL2Java

Reply via email to