SecureWS & 4.0.3 - client certificate needed?

[jjboss]

At the moment I try to migrate my JBoss webervice client from 4.0.2 to 4.0.3 (becaus I saw that the webservice client of 4.0.3 should finally run with Java 1.5).
But I am running into some other exceptions:

java.io.FileNotFoundException: C:\Dokumente und Einstellungen\MyProfile\.keystore
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.(FileInputStream.java:106)
at org.jboss.axis.components.net.JSSE14SocketFactory.getStore(JSSE14SocketFactory.java:318)
at org.jboss.axis.components.net.JSSE14SocketFactory.getKeyStore(JSSE14SocketFactory.java:259)
at org.jboss.axis.components.net.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:207)
at org.jboss.axis.components.net.JSSE14SocketFactory.initFactory(JSSE14SocketFactory.java:175)
at org.jboss.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:127)
at org.jboss.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:166)
at org.jboss.axis.transport.http.HTTPSender.invoke(HTTPSender.java:122)
at org.jboss.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:73)
at org.jboss.axis.SimpleChain.doVisiting(SimpleChain.java:160)
at org.jboss.axis.SimpleChain.invoke(SimpleChain.java:123)
at org.jboss.webservice.client.ClientEngine.invoke(ClientEngine.java:128)
at org.jboss.axis.client.Call.invokeEngine(Call.java:3064)
at org.jboss.axis.client.Call.invoke(Call.java:3049)
at org.jboss.axis.client.Call.invoke(Call.java:2639)
at org.jboss.axis.client.Call.invoke(Call.java:2548)
at org.jboss.axis.client.Call.invokeInternal(Call.java:1979)
at org.jboss.axis.client.Call.invoke(Call.java:1917)
at org.jboss.webservice.client.CallImpl.invoke(CallImpl.java:265)
at org.jboss.axis.client.AxisClientProxy.invokeSEIMethod(AxisClientProxy.java:286)
at org.jboss.webservice.client.PortProxy.invoke(PortProxy.java:177)

Jboss is trying to open my keystore which would be neccessary for authentication by a cleint certificate. But my webservice client does not use authentication via client-certificates so I do not need a keystore (and it workend in 4.0.2). I looked into the problematic class JSSE14SocketFactory:
http://anoncvs.forge.jboss.com:8080/viewrep/JBoss/jaxrpc/src/main/org/jboss/axis/components/net/JSSE14SocketFactory.java
and it seems like you can't use secure Webservices in jboss 4.03 without a client certificate...

Did anybody run into the same problem, or am I the first with the new version?

Jan

[jjboss]

Ok, I now figured it out:

A client certificate is not needed but you have to specify a valid keystore and a valid truststore as well:

 System.setProperty("javax.net.ssl.keyStorePassword", "mypassword");
 System.setProperty("javax.net.ssl.keyStore", "mykeystore.jks");

 System.setProperty("javax.net.ssl.trustStorePassword", "mypassword");
 System.setProperty("javax.net.ssl.trustStore", "mykeystore.jks");

The keystore is created by Sun's keytool. It contains one trusted certificate (an empty keystore did not work).

Jan

[anders.hedstrom]

see:

http://jira.jboss.com/jira/browse/JBWS-450
and
http://jboss.com/index.html?module=bb&op=viewtopic&t=70709



//Anders

[jason.greene]

This is definately a bug. It will be fixed for 4.0.4.

-Jason

[jason.greene]

JBWS-450 is fixed in the 4.0 branch

-Jason

[jason.greene]

4.0.3sp1 will include this fix. Should be released shortly.

-Jason

[jason.greene]

4.0.3sp1 includes this fix as well as other ssl issues. This is available here:

http://sourceforge.net/project/showfiles.php?group_id=22866&package_id=16942&release_id=365509

-Jason