Hi,
I have successfully done client authentication between tomcat and a
webbrowser (firefox), but actually, I need mutual authenticating
between apache/php and axis webservice based on tomcat.
Do you have any ideas?
Thanks in advance,
Tuan Anh
On 5/15/05, Tuan Anh Nguyen <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Yes, I tried to access a tomcat hosted axis ws from php client. It
> worked ok without authentication, but I need to configure it with
> mutual authentication. I use tomcat 4.1 and configure ssl for tomcat
> as following:
>
> 1. I started out using openssl to create my own CA root certificate
> (this is a self-signed certificate used to sign other server and user
> certificates).
> 2. I then created a server certificate for my tomcat server. This
> consisted of creating a certificate request, and then signing that
> request to form a signed certificate.
> 3. I then created a Java Keystore using keytool which will be used by tomcat.
> 4. Imported the root certificate (of my CA) into that keystore (under
> myca alias).
> 5. Then imported the new server certificate (signed by my CA) into the
> same keystore.
> 6. I then configured tomcat to use that keystore (set
> keystoreFile=mykeystorefile, keystorePass=mypassword)
>
> After that, I tried using firefox to connect to tomcat
> (https://localhost:8443), but I got an
> error message: "Could not establish an encrypted connection because
> your certificate was rejected by agatha. Error Code -12271". Of cause,
> I created a certificate for firefox and import cacert.cer (my self
> sign rootca certificate) as authority certificate and certificate for
> firefox as browser's certificate.
>
> What can I do?
>
>
>
> On 5/15/05, Brian Abbott <[EMAIL PROTECTED]> wrote:
> > Tuan Anh,
> >
> > Are you trying to access a tomcat hosted axis ws from
> > a php client? It's not very clear what you're trying
> > to do. But, assuming you want to interact with an AXIS
> > WebService running on Tomcat from a PHP Client, you
> > will need to find a PHP SOAP Toolkit and configure
> > that to connect to your service. There are three major
> > SOAP implementations for PHP:
> >
> >- PEAR::SOAP
> >- NuSOAP
> >- PHP-SOAP
> >
> > The first two have more features, but they're
> > implemented entirely with PHP, so they're a little
> > slower. PHP-SOAP, however, is written in C, so it's a
> > bit faster. All are more then adequate for medium
> > traffic sites however.
> >
> > hope that helps.
> >
> > Brian Abbott
> >
> > --- Nguyen Tuan Anh <[EMAIL PROTECTED]> wrote:
> > > Hi,
> > > Could anyone tell me how to establish mutual
> > > authentication between
> > > apache/php and tomcat with one axis webservice.
> > >
> > > Many thanks,
> > > Tuan Anh
> > >
> > >
> >
> >
> >
> > Discover Yahoo!
> > Have fun online with music videos, cool games, IM and more. Check it out!
> > http://discover.yahoo.com/online.html
> >
>