Fwd: Support Chinese Characters in json result for Restful

2014-10-27 Thread Kai Liu
Dear all, I use cxf to handle the Restful return as following: @Path("/") @Produces("text/json") public class Manager { @GET public String getRequest(@QueryParam("service") String serviceName) throws IOException{ . return myjsonString; } } The myjsonString is [{"id":{"account":"eucalypt

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
Hi, The code for poodle was added for server side. The conduit config that you use should have set the enabled protocols on the jdk SSL context. I only checked cxf 2.7.12 not 2.7.6. I would expect they are the same but will check real quick and reply to this email. Can you attach a debugger to

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread David Roytenberg (Consultant)
Thanks Jason, Since you've worked on Poodle, maybe you are aware of whether the CXF client has changed its behavior since 2.7.6 as far as SSLv2Hello protocol is concerned. I have two identical CXF configurations, using the default protocol setting which looks to be TLS. With the SSL debugging

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread David Roytenberg (Consultant)
Hi Andrei, Here is the code I am using to set the protocol. We also tried it with TLS, but it did not prevent the use of the SSLv2Hello protocol for the Hello packet in the handshake, which seems to be causing the problem with our partner's server. This configuration works fine with anothe

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
Here is the actual page which deals with the config for tls http://cxf.apache.org/docs/tls-configuration.html On Tue, Oct 28, 2014 at 5:06 AM, Jason Pell wrote: > See, but note that the secureSocketProtocol is missing from the examples. > (Search in the page for Configuring SSL Support) > > h

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
See, but note that the secureSocketProtocol is missing from the examples. (Search in the page for Configuring SSL Support) http://cxf.apache.org/docs/client-http-transport-including-ssl-support.html On Tue, Oct 28, 2014 at 5:02 AM, Jason Pell wrote: > So I did some digging to remind myself of h

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
So I did some digging to remind myself of how it works on the client and I was dead wrong. I was thinking about how the server works (having just done the poodle changes) Anyway, what Andrei was absolutely correct. You can see it applied in org.apache.cxf.transport.https.SSLSocketFactoryWrapper.

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
Hi, I run embedded jetty container Sorry I forgot that you were running weblogic when I responded. In that case do you even use the embedded jetty container? I am guessing no. If not, then you would need to use the standard weblogic ssl configuration. I don't believe CXF is responsible for a

Re: Strange exception

2014-10-27 Thread Manu
It seems the ProviderFactory associated with the endpoint of the service comes to an invalid state with the "injectedProviders" attributes gets corrupted. When debugging "ProviderFactory.injectedProviders" for the concerned service, I get : com.sun.jdi.InvocationException occurred invoking method.

Re: Strange exception

2014-10-27 Thread Manu
Actually, the "lists" parameter is an array of Collection containing only one LinkedList. Debugging "lists[0]" leads to another exception : com.sun.jdi.InvocationException occurred invoking method. There something strange with this list ... On Mon, Oct 27, 2014 at 5:14 PM, Manu wrote: > When d

Re: Strange exception

2014-10-27 Thread Manu
When debugging method clearProxies on the failing service, viewing the "lists" parameter in Eclipse shows up an error : "Detail formatter error: An exception occurred: java.lang.NullPointerException" Strange because the list seems fine with no null elements nor something that could lead to this er

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread David Roytenberg (Consultant)
Hi Jason, Are you running on WebLogic by any chance? When I configured the properties in the deployment to point to the WebLogic default key store and trust store, I get a java.security.UnrecoverableKeyException while trying to deploy my application. Did you encounter this problem? Here's

Strange exception

2014-10-27 Thread Manu
Hi, We have an web application in production and an NullPointerException occurs randomly. In fact, randomly means it can occurs on every REST service we have but once a REST service starts to show up this exception, it never stops ending in error until we restart the server. Here is the exception

Re: Username/PWD on STS

2014-10-27 Thread SRog
Hi Colm, thanks for your response. Sorry, I didn't quite understand. If I take a look at the examples I found on the internet, there is no interceptor written for X.509. What is the security binding you are describing? Do you have an example how I have to do it? Thanks, SRog -- View this messag

REST web service with audio as attachment.

2014-10-27 Thread java kurious
Hello all, I am trying to create a REST web service which accepts HTTP POST request with a binary attachment(an audio file) and an XML document . I am trying to define the interface in such a way that the binary file is received as an attachment/header in Camel message and the XML document as the

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread David Roytenberg (Consultant)
Thanks Jason. Much appreciated. I will have a look at what you are doing. David Roytenberg -Original Message- From: jasonmp...@gmail.com [mailto:jasonmp...@gmail.com] On Behalf Of Jason Pell Sent: Monday, October 27, 2014 7:23 AM To: users@cxf.apache.org Subject: Re: How to Disable SSLv

runtime generation of proxy from wadl?

2014-10-27 Thread Vjacheslav V. Borisov
Does it possible to do runtime generation wadl -> java interface -> proxy using JAXRSClientFactory ?

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
Hi, Here is a sample of using your own custom version of the jetty factory in your spring context. It is pretty invasive, so its actually better to wait for 2.7.14 and take advantage of the code already there. I use this code for other reasons though, as it allows me to configure the trust / key

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
That setting won't actually control what protocols jetty will actually use. I think it just controls what the highest protocol is used. The excluded protocols list needs to include the sslv2 setting. we actually overrode the jetty factory jetty engine and one other class to get access to the SSL

RE: wsse:UsernameToken in request header - change from 2.7.1 to 3.0.2

2014-10-27 Thread Malisetti, Ramanjaneyulu
Any clue on this issue? Regards Raman From: Malisetti, Ramanjaneyulu Sent: Saturday, October 25, 2014 9:24 AM To: users@cxf.apache.org Subject: wsse:UsernameToken in request header - change from 2.7.1 to 3.0.2 Hi, Our web services client code which used to work in CXF 2.7.1 is not working wit

RE: JAX-RS Interceptors

2014-10-27 Thread Andrei Shakirin
Hi, The general recommendation is to use ContainerRequestFilter/ContainerResponseFilter's whenever possible, because this keeps your code portable (Container filters are part of JAX-RS spec). If you really have to use CXF interceptors for JAX-RS, the order for inbound chain will be following:

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Vjacheslav V. Borisov
2014-10-24 17:40 GMT+04:00 David Roytenberg (Consultant) < david.roytenb...@optimalpayments.com>: > Hi Vjacheslav, > >Thanks for your reply. We are deploying a web service client on > WebLogic. So unfortunately idedtea won't help in our case as I believe > it's a browser plugin. > No, icedt

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Andrei Shakirin
Hi, I guess you mean TLSClientParameters.secureSocketProtocol in Conduit. As far as I can see this parameter is used for creating java.net.ssl.SSLContext: String protocol = parameters.getSecureSocketProtocol() != null ? parameters .getSecureSocketProtocol() : "TLS"; The sett