1 2 3 4 Previous Next 47 Replies Latest reply on Jul 20, 2007 10:36 AM by earniedyke Go to original post
      • 30. Re: SOAPClient over SSL with basic authentication
        tfennelly

        Ole and Roman, thanks very much for these very useful comments. I'll come back to here once I get some movement on this.

        • 31. Re: SOAPClient over SSL with basic authentication
          tfennelly

           

          "romankuzmik" wrote:
          But here is another problem I have. I am not sure it should be addressed here, but conceptually it is also all about authentication.authorization. In our enterprise all services protected with WS-Security XML firewall layer. Depends on the privacy layer and other facts it varies from simple

          <env:Header>
           <wsse:Security xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/07/secext">
           <wsse:UsernameToken>
           <wsse:Username>???</wsse:Username>
           <wsse:Password>???</wsse:Password>
           </wsse:UsernameToken>
           </wsse:Security>
           </env:Header>
          

          up to crazy combinations on the <wsse:Security/> headers plus SAML assertions plus XML Signatures plus XML encryptions. Probably it also should be handled in the pluggable way in SOAPClient?


          Sorry Roman, I was in a bit of a hurry yesterday and so didn't reply to this at the time.

          So what are we talking about here? I think we'd need more info on this. I really don't want to complicate SOAPClient more than I have to. Are we talking about transformations on the SOAP message to add security tokens etc, depending on the message recipient? In some ways I'd prefer to see this handled seperately, but I'm not sure until we see some more examples. Perhaps we could allow an optional Smooks config on the SOAPClient, so as to allow for transformations on the SOAP message before final delivery.

          • 32. Re: SOAPClient over SSL with basic authentication
            tfennelly

            OK.

            I tried to get something sorted for this but have run into some issues, so it won't be in the MR3 release.

            So what's coming is basically as I said above - a way of configuring a HttpClientFactory on the SOAPClient. I got BASIC Auth working fine, but have run into issues with https using a self-signed cert. HttpClient is supposed to work for this if you set the the "Easy" socket factory on the host configuration Protocol. Perhaps you can help me on this Ole - I might have a look at how you do this in soapUI too.

            More on this later. Sorry it's not going to be in the MR3 release :-(

            • 33. Re: SOAPClient over SSL with basic authentication

              Hi Tom,

              soapUI uses the commons-ssl proposal located at http://juliusdavies.ca/commons-ssl/, which contains an EasySSLProtocolSocketFactory that trusts "anything".. maybe you can use it too!?

              regards!

              /Ole
              eviware.com

              • 34. Re: SOAPClient over SSL with basic authentication
                tfennelly

                Thanks Ole. Since then, I actually figured out what was wrong and have fixed it. I was using EasySSLProtocolSocketFactory but was not registering it properly - I was setting it on the gost configuration and that was not working. Registering it using the static method on the Protocol class did the trick. I'll be checking this stuff in once the code freeze is finished.

                • 35. Re: SOAPClient over SSL with basic authentication
                  earniedyke

                  Thanks for taking up this cause. When you say waiting for the code freeze, do you mean MR3 code freeze? Will your changes not be in MR3?

                  Earnie!

                  • 36. Re: SOAPClient over SSL with basic authentication
                    tfennelly

                    Nope, it will not be in MR3. Sorry about that but I only got it done on Friday and wasn't able to check it in because of an issue I was having (outlined above).

                    • 37. Re: SOAPClient over SSL with basic authentication
                      earniedyke

                      Thanks for the effort. Can you let me know when you check your changes in please.

                      Earnie!

                      • 38. Re: SOAPClient over SSL with basic authentication
                        tfennelly

                        This code is still not in place (codefreeze still in effect), but you can see how it works in the SOAPClient wiki page - goto the "HttpClient Configuration" section at the end.

                        • 39. Re: SOAPClient over SSL with basic authentication
                          tfennelly

                          OK, so support for configuring the connection (via the HttpClientFactory and Configurators) has been added now. It's in the trunk, so if you check out from SVN you'll get this now.

                          I've yet to tie this in properly with a quickstart. I'm waiting on the webservice_consumer quickstart to be added. I've tested it out on the webservice_bpel quickstart, but I don't wanna put it there because there's enough going on there already.

                          See the docs for this here on the wiki. See the section on "HttpClient Configuration".

                          • 40. Re: SOAPClient over SSL with basic authentication
                            earniedyke

                            Excellent!!!! Thanks for taking this on. I will give it a try today.

                            • 41. Re: SOAPClient over SSL with basic authentication
                              earniedyke

                              I pulled the trunk down and tried to build it but I got these compile errors.

                              Earnie!

                              [java] compile:
                               [java] [mkdir] Created dir: C:\svn\esb\product\services\soapui-client\target\classes
                               [java] [javac] Compiling 3 source files to C:\svn\esb\product\services\soapui-client\target
                              \classes
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:101: illegal start of type
                               [java] [javac] <<<<<<< .mine
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:222: <identifier> expected
                               [java] [javac] } else if (Collection.class.isAssignableFrom(paramRuntime))
                              {
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:222: <identifier> expected
                               [java] [javac] } else if (Collection.class.isAssignableFrom(paramRuntime))
                              {
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:228: '{' expected
                               [java] [javac] }
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:232: 'class' or 'interface' expected
                               [java] [javac] List<Node> children = YADOMUtil.copyNodeList(element.getChildNodes()
                              );
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:233: 'class' or 'interface' expected
                               [java] [javac] for (Node node : children) {
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:238: 'class' or 'interface' expected
                               [java] [javac] }
                               [java] [javac] ^
                               [java] [javac] C:\svn\esb\product\services\soapui-client\src\main\java\org\jboss\soa\esb\se
                              rvices\soapui\SoapUIClientService.java:323: 'class' or 'interface' expected
                               [java] [javac] ^
                               [java] [javac] 8 errors
                              
                               [java] BUILD FAILED
                               [java] C:\svn\esb\product\build.xml:196: The following error occurred while executing this line
                              :
                               [java] C:\svn\esb\product\services\build.xml:10: The following error occurred while executing t
                              his line:
                               [java] C:\svn\esb\product\services\soapui-client\build.xml:31: Compile failed; see the compiler
                               error output for details.


                              • 42. Re: SOAPClient over SSL with basic authentication
                                tfennelly

                                If you've modified any files locally, revert to the repo reversion and try again. That file should be in conflict on your machine. The CI build machine is building this stuff fine, so the repo health is good. Also look at SoapUIClientService in the repo... no conflicts!

                                • 43. Re: SOAPClient over SSL with basic authentication
                                  marklittle

                                  Hmmm. That looks like an svn merge issue. Did you get a fresh checkout?

                                  • 44. Re: SOAPClient over SSL with basic authentication
                                    earniedyke

                                    I did an svn update just like I have been doing. Should I have done something different?

                                    Earnie!