I successfully imported the server cert into my keystore with the following
command:
keytool -import -alias ws_xxx_com -keystore /tomcat/tomcat_keystore/keystore
-trustcacerts -file /tomcat/workspacex/ws/target/wsapps.crt

And, my clientGen ant target looks like this:

<target name="clientGen" description="Generates Client stubs">
       <taskdef name="wsgen" classname="org.codehaus.xfire.gen.WsGenTask"
classpathref="master-classpath"/>
       <!--wsgen outputDirectory="target/client"
wsdl="target/AuthenticationService.xml"
             package="com.xxx.authentication.manager"
binding="xmlbeans"  overwrite="true"  /-->
       <wsgen outputDirectory="target/clientjax"  wsdl="
https://ws.xxx.com/services/AuthenticationService?wsdl";
            package="com.xxx.authentication.manager" overwrite="true"/>
           <jvmarg value="-
Djavax.net.ssl.keyStore=/tomcat/tomcat_keystore/keystore" />
           <jvmarg value="-Djavax.net.ssl.keyStorePassword=changeit" />
   </target>

However, I am still getting the same error message during client stub
generation from wsdl url.  Looks like the way I am supplying jvmarg values
are not correct.
Thanks.

On 2/28/07, Tomek Sztelak <[EMAIL PROTECTED]> wrote:

you should use jvm paramters :

-Djavax.net.ssl.trustStore=<MY_KEY_STORE>
-Djavax.net.ssl.keyStorePassword=<KEYSTORE_PASSOWRD>

On 2/28/07, sudip shrestha <[EMAIL PROTECTED]> wrote:
> I followed:
> http://xfire.codehaus.org/Client+and+Server+Stub+Generation+from+WSDL
> :to generate client stub to access a web service I created.  Everything
> works normally when I save the wsdl file in a local directory.  But when
I
> try to access the wsdl url directly, I get:
> BUILD FAILED
> /tomcat/workspacex/ws/build.xml:139:
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path
> building failed:
> sun.security.provider.certpath.SunCertPathBuilderException
> : unable to find valid certification path to requested target
>
> The wsdl url is a secure url:
> https://ws.xxx.com/services/MyService?wsdl.
> Looks like I have to import the certs or at least provide reference to
the
> cert in ant configs... How do I go about this?
> Thanks for suggestions.
>
>


--
-----
When one of our products stops working, we'll blame another vendor
within 24 hours.

---------------------------------------------------------------------
To unsubscribe from this list please visit:

    http://xircles.codehaus.org/manage_email


Reply via email to