[
https://issues.apache.org/jira/browse/RAMPART-449?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17820508#comment-17820508
]
Robert Lazarski edited comment on RAMPART-449 at 2/25/24 6:55 PM:
------------------------------------------------------------------
I found time to look at this today and at a glance all these certs are used for
testing - 16 of them - and are self signed with an empty password challenge.
Just hit enter.
I am not aware of an Apache foundation policy regarding self signed certs and I
couldn't easily find anything looking at the usual places. The commit history
indicates they were self generated.
I did notice the wss4j merlin package name seemed to change in files such as
{color:#ff54ff}Merlin in "{color}
{color:#000000}modules/rampart-tests/test-r{color}esources/policy/rampart-asymm-binding-6-3des-r15.xml"
.
I suppose most if not all of these certs need to be regenerated because they
are expired and insecure - that's what I see when executing
"{color:#000000}keytool -list -v -keystore
modu{color}les/rampart-tests/test-resources/keys/interop2.jks"
I can't say there is anything we can do short of cert regeneration.
BTW, we are getting closer to an Axiom and Axis2 release. Once we get the unit
tests passing I'd like to switch over to the Axis2 1.8.3 snapshot that includes
jakarta support.
was (Author: robertlazarski):
I found time to look at this today and at a glace all these certs are used for
testing - 16 of them - and are self signed with an empty password challenge.
Just hit enter.
I am not aware of an Apache foundation policy regarding self signed certs and I
couldn't easily find anything looking at the usual places. The commit history
indicates they were self generated.
I did notice the wss4j merlin package name seemed to change in files such as
{color:#ff54ff}Merlin in "{color}
{color:#000000}modules/rampart-tests/test-r{color}esources/policy/rampart-asymm-binding-6-3des-r15.xml"
.
I suppose most if not all of these certs need to be regenerated because they
are expired and insecure - that's what I see when executing
"{color:#000000}keytool -list -v -keystore
modu{color}les/rampart-tests/test-resources/keys/interop2.jks"
I can't say there is anything we can do short of cert regeneration.
BTW, we are getting closer to an Axiom and Axis2 release. Once we get the unit
tests passing I'd like to switch over to the Axis2 1.8.3 snapshot that includes
jakarta support.
> NoClassDefFoundError with Axis2 1.8.0
> -------------------------------------
>
> Key: RAMPART-449
> URL: https://issues.apache.org/jira/browse/RAMPART-449
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.7.1
> Reporter: Matthias Kraaz
> Priority: Major
>
> Axis2 1.8.0 updated Axiom to 1.3 thereby breaking rampart, which uses an
> Axiom API that has been removed:
>
> {noformat}
> java.lang.NoClassDefFoundError:
> org/apache/axiom/soap/impl/builder/StAXSOAPModelBuilder
> at
> org.apache.rampart.util.Axis2Util.getDocumentFromSOAPEnvelope(Axis2Util.java:159)
>
> at org.apache.rampart.RampartMessageData.<init>(RampartMessageData.java:280)
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:61)
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65)
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:335)
> at org.apache.axis2.engine.Phase.invoke(Phase.java:308)
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:250)
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:415)
> at
> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:399)
>
> at
> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:225)
>
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:150)
> at pls.soap.client.SOAPClient.sendRequest(SOAPClient.java:284)
> at pls.soap.client.SOAPClient.handleRequest(SOAPClient.java:143)
> at pls.soap.client.SOAPClient.processSendJob(SOAPClient.java:101)
> at
> pls.soap.client.SendJobProcessorImpl.processSendJob(SendJobProcessorImpl.java:10)
>
> at ls.osis.server.prot.SendJobQueue.process(SendJobQueue.java:139)
> at ls.osis.server.prot.SendJobQueue$SendJobTask.run(SendJobQueue.java:108)
> at
> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
>
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
> at
> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
>
> at
> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
>
> at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: java.lang.ClassNotFoundException:
> org.apache.axiom.soap.impl.builder.StAXSOAPModelBuilder
> at
> java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:583)
> at
> java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:178)
>
> at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:521) ...
> 22 more
> {noformat}
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org
