Hi,
I'm trying to access a WS which requires authentication with a certificate.
I generated the client code from the wsdl and wrote following test code:
##
SomeService service = new SomeService();
service.addPort(new QName({urn:someService}Some),
SOAPBinding.SOAP11HTTP_BINDING,
https://a.b.c/d;);
Some sei = service.getSome();
Client client = ClientProxy.getClient(sei);
HTTPConduit cond = (HTTPConduit)client.getConduit();
TLSClientParameters tls = new TLSClientParameters();
tls.setSecureSocketProtocol(SSL);
KeyStore ks = KeyStore.getInstance(pkcs12);
ks.load(getClass().getResourceAsStream(/client-certificates.p12),
xxx.toCharArray());
KeyManagerFactory kmf =
KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
kmf.init(ks, xxx.toCharArray());
tls.setKeyManagers(kmf.getKeyManagers());
KeyStore ks2 = KeyStore.getInstance(JCEKS);
ks2.load(getClass().getResourceAsStream(/server-truststore.jks),
yyy.toCharArray());
TrustManagerFactory tmf =
TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
tmf.init(ks2);
tls.setTrustManagers(tmf.getTrustManagers());
cond.setTlsClientParameters(tls);
MessageTrustDecider mtd = new MessageTrustDecider(){
@Override
public void establishTrust(String conduitName, URLConnectionInfo
connectionInfo, Message message)
throws UntrustedURLConnectionIOException {
if (connectionInfo instanceof HttpsURLConnectionInfo){
System.out.println(Local certs: +
((HttpsURLConnectionInfo)connectionInfo).getLocalCertificates());
System.out.println(Server certs: +
((HttpsURLConnectionInfo)connectionInfo).getServerCertificates());
}
}
};
cond.setTrustDecider(mtd);
HTTPClientPolicy pol = new HTTPClientPolicy();
pol.setAllowChunking(false);
cond.setClient(pol);
sei.getXYZ(new SomeRequestType());
##
The result:
Local certs: null
The KeyStore contains exactly one key, but apparently it does not get
transferred.
The remote service tells me (via SOAPFault) that no keys have been
transferred.
Am I missing anything?
Thanks and Regards,
Marko
PS: I'm using v 2.0.5
--
View this message in context:
http://www.nabble.com/SSL-KeyManager-Authentication-tp16718625p16718625.html
Sent from the cxf-user mailing list archive at Nabble.com.
