Ok, the problem was in the import process of the client certificate, as
suspected. Keytool was not importing the private key into the
"clientes.jks" keystore.

I deleted everything from this keystore and followed this post (
http://cunning.sharp.fm/2008/06/importing_private_keys_into_a.html) to
import the cliente certificate plus the private key.

Anyway, I think Axis2 should have specified that the exception message was
taken from the SOAP response message: I thought it was generating it.


2013/4/26 David Perra <sota...@gmail.com>

> It dit not work.
> Anyway, it throws a "FileNotFound" exception if it cannot find the
> keystores, so it is not that.
>
>
>
> 2013/4/26 Martin Gainty <mgai...@hotmail.com>
>
>> Cambia
>> C:\\Archivos de programa\\
>>
>> a
>> C:\\ARCHIV~1
>>
>> Saludos Cordiales!
>>
>> Martin
>> ______________________________________________
>> Jogi és Bizalmassági kinyilatkoztatás/Verzicht und
>> Vertraulichkeitanmerkung/Note de déni et de confidentialité
>>
>>
>> Ez az üzenet bizalmas.  Ha nem ön az akinek szánva volt, akkor kérjük,
>> hogy jelentse azt nekünk vissza. Semmiféle továbbítása vagy másolatának
>> készítése nem megengedett.  Ez az üzenet csak ismeret cserét szolgál és
>> semmiféle jogi alkalmazhatósága sincs.  Mivel az electronikus üzenetek
>> könnyen megváltoztathatóak, ezért minket semmi felelöség nem terhelhet ezen
>> üzenet tartalma miatt.
>>
>> Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene
>> Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte
>> Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht
>> dient lediglich dem Austausch von Informationen und entfaltet keine
>> rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von
>> E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen.
>>
>> Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le 
>> destinataire prévu, nous te demandons avec bonté que pour satisfaire 
>> informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie 
>> de ceci est interdite. Ce message sert à l'information seulement et n'aura 
>> pas n'importe quel effet légalement obligatoire. Étant donné que les email 
>> peuvent facilement être sujets à la manipulation, nous ne pouvons accepter 
>> aucune responsabilité pour le contenu fourni.
>>
>>
>>
>>
>>  ------------------------------
>> Date: Fri, 26 Apr 2013 12:23:53 +0200
>> Subject: axis2.AxisFault: [clientAuthRequired] No se ha encontrado el
>> certificado de cliente (client certificate not found)
>> From: sota...@gmail.com
>> To: java-user@axis.apache.org
>>
>>
>> Hello everybody.
>> I am obtaining this exception (client certificate not found) when trying
>> to connect to a secure Web Service that requires a client certificate. I am
>> using a web service client automatically generated by axis2, using the
>> Eclipse wizard.
>>
>> This is the calling code, that causes the exception in the last line:
>>
>> ----------------------
>>  System.setProperty("javax.net.ssl.trustStore","C:\\Archivos de
>> programa\\Java\\jre7\\lib\\security\\cacerts");
>> System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
>> System.setProperty("javax.net.ssl.keyStore","D:\\Perfil
>> Usuario\\internet\\Escritorio\\workspace\\certificados\\clientes.jks");
>> System.setProperty("javax.net.ssl.keyStorePassword", "changeit");
>> ServicioBoletinStub lala = new ServicioBoletinStub();
>> ConsultaDeCatalogo cons = new ConsultaDeCatalogo();
>> cons.setArgs0("SECCIONES");
>> ConsultaDeCatalogoResponse conResp = lala.consultaDeCatalogo(cons);
>> -----------------------------
>>
>> The client certificate is imported in "clientes.jks" keystore, and all
>> the other required certificates for the authentication path are in
>> "cacerts".
>> The only weird thing I had to do was to convert the client certificate
>> from .p12 to .cer, because keytool was complaining that the .p12 file was
>> not an x509 certificate. The .p12 file was encrypted with a password, but
>> the .cer file is not, so I am afraid that something was missed during the
>> conversion. I am very new to handling certificates so I do not know what I
>> am missing.
>>
>> Thank you very much.
>>
>
>

Reply via email to