Thanks Amila.. Also if I want to use separate certificates (files in .crt suffix) for signing and encryption, what is the proper way to configure in Rampart?
Thanks again, Weilan Sent from my iPhone On Jun 18, 2012, at 3:22 AM, Amila Jayasekara <[email protected]> wrote: > Hi Weilan, > > If you look at Client.java you would see following 2 statements. > > System.setProperty("javax.net.ssl.trustStore", > "/home/amila/development/apache/rampart-v2-tests/jks/tomcat-jks/tomcat.jks"); > System.setProperty("javax.net.ssl.trustStorePassword", "tomcat"); > > Above 2 statements will set the trust store at client side. You need > to change above 2 parameters to point to Java keystore you configured > in tomcat. I believe you are getting undermentioned exception due to > not having proper values for above properties. > > Thanks > AmilaJ > > On Mon, Jun 18, 2012 at 5:00 AM, Weilan Wu <[email protected]> wrote: >> A quick question, where should client-key.jks be copied to? I was able to >> deploy the service, and when i tried 'ant run' under client folder, it gives >> the following error: >> >> [java] Caused by: javax.net.ssl.SSLException: >> java.lang.RuntimeException: Unexpected error: >> java.security.InvalidAlgorithmParameterExce >> ption: the trustAnchors parameter must be non-empty >> >> Thanks >> Weilan >> >> >> >> On Sat, Jun 16, 2012 at 5:48 PM, Weilan Wu <[email protected]> wrote: >>> >>> Hi Amila, >>> Thanks very much for the details and sample source code. Yes, Look forward >>> to the docs fixes. >>> >>> Also, could you give some info on how to deploy the service in the >>> enclosed package to a Tomcat (with SSL enabled)? I am going to try it out as >>> well.. >>> >>> Thanks again! >>> >>> Weilan >>> >>> >>> On Thu, Jun 14, 2012 at 11:37 PM, Amila Jayasekara <[email protected]> >>> wrote: >>>> >>>> Hi Weilan, >>>> >>>> The sample01 refers to user name token over HTTPS. In samples we use >>>> SimpleHTTPServer which is unable to handle HTTPS calls. If you look at >>>> server policy you will see that it enforces HTTPS transport. Therefore >>>> you cannot execute this sample over HTTP transport. In other sense you >>>> cannot run the sample with ant command. >>>> >>>> We need to fix documentation accordingly. I will base RAMPART-343 for >>>> that. Here I am attaching a server and client code of same sample >>>> which runs over HTTPS. You need to deploy this in a server like >>>> tomcat. In addition you also need to configure tomcat to talk over >>>> HTTPS. Please refer [1] to configure tomcat over HTTPS. >>>> >>>> In the client code you need to set trust store parameters accordingly. >>>> By looking at sample code you will get an idea. >>>> >>>> Let us know if you further encounter issues. >>>> >>>> Thanks >>>> AmilaJ >>>> >>>> [1]. http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html >>>> >>>> On Fri, Jun 15, 2012 at 5:54 AM, Weilan Wu <[email protected]> wrote: >>>>> I am refering to JIRA: >>>>> https://issues.apache.org/jira/browse/RAMPART-343 >>>>> >>>>> I am still seeing the issue on RHEL5 as well as Windows-7. Any ideas >>>>> when >>>>> this will be fixed? >>>>> >>>>> Thanks, >>>>> Weilan >>>>> >>>>> >>>>> On Thu, Jun 14, 2012 at 10:53 AM, Weilan Wu <[email protected]> >>>>> wrote: >>>>>> >>>>>> Thanks Sagara, I did downloaded Rampart 1.6.2 and AXIS2 1.6.2 and >>>>>> tried to >>>>>> follow the policy/samples. It seems to have a known issue for >>>>>> service.01/client.01 which shows: >>>>>> >>>>>> [java] Exception in thread "main" org.apache.axis2.AxisFault: >>>>>> Expected >>>>>> transport is "https" but incoming transport found : "http" >>>>>> >>>>>> This has been filed in JIRA for 1.6.1 and was closed as resolved. >>>>>> >>>>>> Thanks, >>>>>> Weilan >>>>>> >>>>>> >>>>>> On Wed, Jun 13, 2012 at 3:04 AM, Sagara Gunathunga >>>>>> <[email protected]> wrote: >>>>>>> >>>>>>> On Wed, Jun 13, 2012 at 1:43 PM, Weilan <[email protected]> wrote: >>>>>>>> Thanks Krishantha, for the reference. Actually it was the link you >>>>>>>> mentioned >>>>>>>> that lead me to this ML. >>>>>>>> >>>>>>>> My question is, if I have a WSDL that contains WSP tags >>>>>>>> (specifically >>>>>>>> for >>>>>>>> security capabilities). What the step-by-step guides for >>>>>>>> constructing a >>>>>>>> WS >>>>>>>> client using AXIS2 solution? >>>>>>> >>>>>>> Apache Rampart ( Axis2 security module) distribution contains number >>>>>>> of policy related working samples better to refer them. >>>>>>> >>>>>>> Thanks ! >>>>>>> >>>>>>>> >>>>>>>> Thanks very much! >>>>>>>> >>>>>>>> Weilan >>>>>>>> >>>>>>>> Sent from my iPhone >>>>>>>> >>>>>>>> On Jun 12, 2012, at 8:49 PM, Krishantha Manjula Rathnayaka >>>>>>>> <[email protected]> wrote: >>>>>>>> >>>>>>>> Hi Weilan, >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> This is regarding the issue that you have, >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> 1.) 1.) Yes it should supports WS Policy at client-side >>>>>>>> >>>>>>>> 2.) 2.) You may find some useful information here >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Thank You ! >>>>>>>> >>>>>>>> Kind Regards, >>>>>>>> >>>>>>>> Krishantha >>>>>>>> >>>>>>>> >>>>>>>> On Wed, Jun 13, 2012 at 7:24 AM, Weilan Wu <[email protected]> >>>>>>>> wrote: >>>>>>>>> >>>>>>>>> Hi Sagara, >>>>>>>>> Thanks for responding - those a couple of links are quite helpful >>>>>>>>> as >>>>>>>>> background readings, however, I am still unclear: >>>>>>>>> >>>>>>>>> Does AXIS2 support WS-P for Client construction? >>>>>>>>> If 1) is confirmed, how exactly we configure AXIS2 client to be >>>>>>>>> WS-Policy >>>>>>>>> aware? >>>>>>>>> >>>>>>>>> Thank you very much, >>>>>>>>> >>>>>>>>> >>>>>>>>> Weilan >>>>>>>>> >>>>>>>>> >>>>>>>>> On Mon, Jun 11, 2012 at 11:05 PM, Sagara Gunathunga >>>>>>>>> <[email protected]> wrote: >>>>>>>>>> >>>>>>>>>> http://wso2.org/library/23 >>>>>>>>>> http://wso2.org/library/3786 >>>>>>>>>> >>>>>>>>>> HTH, anyway [email protected] list is more appropriate >>>>>>>>>> for >>>>>>>>>> user questions. >>>>>>>>>> >>>>>>>>>> Thanks ! >>>>>>>>>> >>>>>>>>>> On Tue, Jun 12, 2012 at 11:26 AM, Weilan Wu <[email protected]> >>>>>>>>>> wrote: >>>>>>>>>>> Hi, I wonder if there are any good tutorials/examples on how to >>>>>>>>>>> implement >>>>>>>>>>> Axis2 client for WSP support? >>>>>>>>>>> >>>>>>>>>>> I briefly searched and found Rampart is needed.however I still >>>>>>>>>>> need >>>>>>>>>>> more >>>>>>>>>>> details, such as from WSDL2Java (and which binding method etc). >>>>>>>>>>> >>>>>>>>>>> Thanks in advance! >>>>>>>>>>> >>>>>>>>>>> Weilan >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> Sagara Gunathunga >>>>>>>>>> >>>>>>>>>> Blog - http://ssagara.blogspot.com >>>>>>>>>> Web - http://people.apache.org/~sagara/ >>>>>>>>>> LinkedIn - http://www.linkedin.com/in/ssagara >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> --------------------------------------------------------------------- >>>>>>>>>> To unsubscribe, e-mail: [email protected] >>>>>>>>>> For additional commands, e-mail: [email protected] >>>>>>>>>> >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> >>>>>>>> Thank You! >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Kind Regards, >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Krishantha Manjula Rathnayake >>>>>>>> >>>>>>>> B.Sc.(Hons) Eng., AMIE(SL), IACSIT >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> Sagara Gunathunga >>>>>>> >>>>>>> Blog - http://ssagara.blogspot.com >>>>>>> Web - http://people.apache.org/~sagara/ >>>>>>> LinkedIn - http://www.linkedin.com/in/ssagara >>>>>>> >>>>>>> --------------------------------------------------------------------- >>>>>>> To unsubscribe, e-mail: [email protected] >>>>>>> For additional commands, e-mail: [email protected] >>>>>>> >>>>>> >>>>> >>>> >>>> >>>> >>>> -- >>>> Mobile : +94773330538 >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: [email protected] >>>> For additional commands, e-mail: [email protected] >>> >>> >> > > > > -- > Mobile : +94773330538 > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
