cipher suite [0,5] is SSL_RSA_WITH_RC4_128_SHA in SSL message. I don't know if you run your SOAP program with web browser or not. If you do, the error might be to access files on a server(your weblogic?)
that only has DSA-based certificates. Then you should create certificates that use RSA-based keys which could interact with
IE or Navigator(Navigator and IE do not use DSA public keys in their enabled cipher suites).


Example: keytool -genkey -alias weblogic -keystore testkeys -keyalg rsa

I got my own problem. I ran my SOAP program well with SSL in IE on our intranet servers(Tomcat on Linux), however, when I move it to a public server(same as the intranet one except it has a public IP), I first time type the same URL like "https://mycompany.com/",it does not show anything, no import certificate dialog box pop-up like I met before and there is no error log in catalina.out for Tomcat.

Any ideas on this? Thanks in advance.

-Daniel

Mike Ferraro wrote:

First,
I saw the message "SSL messages via Apache SOAP/Weblogic 6.1" in the
archives.  Marty, I believe that Daniel is correct.  You are missing
certificates for your client and server to be able to authenticate with each
other.  I ran into that second exception when I specified the wrong location
for my client keystore.

Second,
I need help!  I'm am trying to run an Apache SOAP client in Weblogic 6.1
over a secure SSL connection.  I have successfully run the same exact code
in a standalone app, but when I run it under Weblogic I get this exception:

javax.net.ssl.SSLException: Can't support cipher suite [0, 5]

The stacktrace looks something like:

[SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket:
javax.net.ssl.SSLException: Can't support cipher suite [0, 5];
targetException=java.lang.IllegalArgumentException: Error opening socket:
javax.net.ssl.SSLException: Can't support cipher suite [0, 5]]
at
org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.ja
va:354)
at org.apache.soap.rpc.Call.invoke(Call.java:248)
...
...
...

Does anyone know what is wrong and how I can fix it?

~mike







Reply via email to