I am happy to reoport that HttpClient works with Sun's JSSE under weblogic
7.0.
I installed the JSSE jars as extensions (jre/lib/ext), and set the provider
information explicitly in the code instead of java.security file.
System.setProperty("java.protocol.handler.pkgs","com.sun.net.ssl.internal.ww
w.protocol");
java.security.Security.addProvider(new
com.sun.net.ssl.internal.ssl.Provider());
I also added the server certificates to cacerts file. One small twist here
was the fact that I had to add all the certificates in the server
certificate chain since Entrust (the root CA used) is not available by
default in the original cacerts file shipped by Sun.
I am still unable to get HttpClient working with weblogic's native SSL
implementation. I think this may be related to the policy setup. As per
weblogic's example, I only set the following property...there is no
equivalent addProvider call.
System.setProperty("java.protocol.handler.pkgs", "weblogic.net");
Good for now.
Om.
----- Original Message -----
From: "Vamsi Atluri" <[EMAIL PROTECTED]>
To: "Commons HttpClient Project" <[EMAIL PROTECTED]>
Sent: Tuesday, May 27, 2003 7:34 PM
Subject: Re: Httpclient under weblogic 7.0
> Hi Om,
>
> I recently had to use HttpClient to make some SSL connections from with in
> a session bean deployed in WebLogic 7.0. I had a problem where the SSL
> handshake never goes through. I am using JSSE for SSL though. I did the
> following steps to get it working:
>
> 1) moved the JDK to 1.4.1
> 2) added jsse.jar, httpclient.jar, jnet.jar and jcert.jar to the
> POST_CLASSPATH in startWebLogic.cmd (so that they will be tacked on to
> CLASSPATH)
> 2) added the certificate of the host i am connecting to (xxx.cer) cacerts
> in the JDK and also the cacerts under \bea\weblogic700\server\lib\.
> 2.1) the way to do this is "keytool -import -keystore "path to
> cacerts" -file "path to xxx.cer"
> 2.2) the default password for the keystore is "changeit" :-)
> 3) add the following argument to the weblogic.Server command:
> -Dweblogic.security.SSL.trustedCAKeyStore=c"path to cacerts"
>
> Hope this helps.
>
> -Vamsi
>
> --- Om Narayan <[EMAIL PROTECTED]> wrote:
> > I am trying to use httpclient with weblogic 7.0.
> > It works fine without SSL, but when I try to use https urls it just sits
> > there hanging. If I use weblogic's apis, the program works fine (btw, I
> > am using the sslclient example that comes with weblogic).
> > I am using weblogic's implementation of SSL (not Sun's JSSE). Is there
> > any special setup/installation necessary?
> >
> > Om.
> >
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
> http://calendar.yahoo.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
[EMAIL PROTECTED]
> For additional commands, e-mail:
[EMAIL PROTECTED]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]