I tested the web service pointing a web browser to it, and the browser gives me the "security alert" asking me whether I want to "accept" the certificate and proceed.
As to your other questions, I am not sure. I don't know much about this. I didn't want to get trusted certificates or any of that. We only need encryption. Well, breaking news, I just added the following startup option to tomcat, and things are working now, is this the solution? :-))) -Daxis.socketSecureFactory=org.apache.axis.components.net.SunFakeTrustSocketFactor I grabbed the above from Axis' FAQ (regarding unsigned certificates) Don, I will try your idea as well and report back. -----Original Message----- From: Ephemeris Lappis [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 01, 2005 11:56 AM To: [email protected] Subject: RE: Axis Client using HTTPS w/ no authentication how? I don't know how the gsoap ssl works, but, just few questions : - Are you sure the server's certificate is valid : date, issuer, etc ? - Is this server certificate's issuer (CN=?) consistent with your server's hostname ? - Are you sure the certification chain for this certficate ends with a trusted certificate on the client side ? >>> -----Original Message----- >>> From: Melean, Calixto (Calixto) [mailto:[EMAIL PROTECTED] >>> Sent: Wednesday, June 01, 2005 5:49 PM >>> To: [email protected] >>> Subject: Axis Client using HTTPS w/ no authentication how? >>> >>> >>> Folks, >>> >>> Could anybody please help me with the following problem. I am >>> desperate for help as I can't get this to work. >>> >>> I don't know if the problem is server or client. Anybody know how to >>> configure Axis to send HTTPS to servers without using >>> authentication/certificates. >>> >>> The web service is using gsoap. The client is using java apache >>> axis. The client is trying to use SSL(HTTPS). >>> >>> I dont want want any authentication/certificates. I only need >>> encryption. >>> >>> In the server I am doing: >>> >>> soap_ssl_server_context( soap, SOAP_SSL_DEFAULT, NULL, NULL, NULL, >>> NULL, NULL, NULL, NULL ) >>> >>> The error printed by gsoap is: >>> >>> SOAP FAULT: SOAP-ENV:Server. SSL_ERROR_SSL error:1408A0C1:SSL >>> routines:SSL routines:reason(193). SSL_accept >>> () failed in soap_ssl_accept() >>> >>> The error on the Axis side is: >>> >>> javax.net.ssl.SSLHandshakeException: Received fatal alert: >>> handshake_failure >>> >>> --------------------- >>> >>> Now, I tried setting the soap context using the included server.pem >>> (though I dont think I need this). And this is what happens: >>> >>> soap_ssl_server_context( soap, SOAP_SSL_DEFAULT, "server.pem", >>> "password", NULL, NULL, NULL, NULL, NULL ) >>> >>> Error on gsoap side: >>> >>> SOAP FAULT: SOAP-ENV:Server. SSL_ERROR_SSL error:14094416:SSL >>> routines:SSL routines:reason(1046). SSL_accept >>> () failed in soap_ssl_accept() >>> >>> Error on Axis side: >>> >>> javax.net.ssl.SSLHandshakeException: >>> sun.security.validator.ValidatorException: No trusted certificate >>> found >>> >>> >>> The errors are different. Again, the goal is to have encryption with >>> no authentication. Anybody knows how to get this going. >>> >>> I appreciate any help >>> >>> thanks
