I am trying to make a rest call, via HTTPS and have 2way auth. I originally
tried to do this with CXF[1], but due to an issue with the conduit not
attaching, have moved to a jetty endpoint.
I have the below config for the jetty endpoint:
<bean id="keyStoreParameters"
class="org.apache.camel.util.jsse.KeyStoreParameters">
<property name="resource"
value="${http.certs.location}/client-keystore.jks"/>
<property name="password" value="${http.keyManagers.password}"/>
</bean>
<bean id="truststoreParameters"
class="org.apache.camel.util.jsse.KeyStoreParameters">
<property name="resource"
value="${http.certs.location}/client-truststore.jks"/>
<property name="password" value="${http.trustManagers.password}"/>
</bean>
<bean id="trustManagersParameters"
class="org.apache.camel.util.jsse.TrustManagersParameters">
<property name="keyStore" ref="truststoreParameters"/>
</bean>
<bean id="keyManagersParameters"
class="org.apache.camel.util.jsse.KeyManagersParameters">
<property name="keyStore" ref="keyStoreParameters"/>
<property name="keyPassword" value="${http.keyManagers.password}"/>
</bean>
<bean id="sslContextParameters"
class="org.apache.camel.util.jsse.SSLContextParameters">
<property name="keyManagers" ref="keyManagersParameters"/>
<property name="trustManagers" ref="trustManagersParameters"/>
</bean>
<bean id="jetty"
class="org.apache.camel.component.jetty.JettyHttpComponent">
<property name="sslContextParameters" ref="sslContextParameters"/>
</bean>
And make the call as per:
<log message="${body} sent to jetty"/>
<convertBodyTo type="java.lang.String"/>
<to
uri="jetty://{{fuse.rest.transport}}://{{fuse.rest.host}}:{{fuse.rest.port}}/rest/fuse"/>
But i still get cert issues. I know the certs are correct and that i am
pointing to the correct stores as i have a simple java class that proves
this works. I've put SSL in debug[2], but am not sure what a lot of it
means. The main thing that sticks out is:
CamelJettyClient(0x73d8db54)-4716, WRITE: TLSv1.2 Handshake, length = 48
CamelJettyClient(0x73d8db54)-4712, called closeInbound()
CamelJettyClient(0x73d8db54)-4712, fatal error: 80: Inbound closed before
receiving peer's close_notify: possible truncation attack?
javax.net.ssl.SSLException: Inbound closed before receiving peer's
close_notify: possible truncation attack?
%% Invalidated: [Session-35, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA]
This is for camel 2.12.
Have i missed something on the config side?
[1]
http://cxf.547215.n5.nabble.com/Camel-CXF-HTTPS-http-tlsClientParameters-not-attaching-td5755601.html
[2] https://gist.github.com/garethahealy/0144444fcfe6d59eb53b
--
View this message in context:
http://camel.465427.n5.nabble.com/Jetty-HTTPS-2way-tp5765296.html
Sent from the Camel - Users mailing list archive at Nabble.com.
