SSL problem (was: Re: The problem of Apache soap-2.1-rc1 on SSL)

[Sanjiva Weerawarana <sa...@watson.ibm.com>]

Hi Chris and other SSL-aware folks,

This seems like a big bug to me - does this imply that our client-side
SSL is not working?? That seems unlikely to me because several
people have been using this already.

We need to fix this or explain the usage before shipping SSL support!
I am sure SSL support will be widely used (probably the most widely
used new feature) and if it doesn't work out of the box we're hosed.

So, until we fix or explain this bug I am putting a -1 on 2.1. Sorry.

Sanjiva.

----- Original Message -----
From: "Yuhichi Nakamura" <NA...@jp.ibm.com>
To: <so...@xml.apache.org>
Sent: Friday, February 02, 2001 8:03 PM
Subject: Re: The problem of Apache soap-2.1-rc1 on SSL


>
> I am a colleague of Toshiro.  We are very concerned with this
> issue.  Please help us.
>
> I found the following name in org.apache.soap.util.net.SSLUtils:
>     Chris Nelson (cnelson@synchrony.net)
>
> Chris, could you help us?
>
> No document for SSL is not provided.  It is a minor problem.
> The major problem can be found  in the exception.  Watch
> the following:
>     "untrust ed server cert chain"
> This indicates that when the client received a
> server cert, it cannot trust the cert.  I think
> the client has to specify what certs he/she trust
> before establishing SSL connection.  However,
> there is no code for specifying trusted certs.
> I am not a security expert, and has not look at
> the other portion of the codebase.   So
> I can be wrong.
>
> Regards,
>
> Yuhichi Nakamura
> IBM Research, Tokyo Research Laboratory
> Tel: +81-46-215-4668
> FAX: +81-46-215-7413
>
>
> From: Toshiro Takase/Japan/IBM@IBMJP on 2001/02/02 23:07
>
> Please respond to soap-dev@xml.apache.org
>
> To:   soap-dev@xml.apache.org
> cc:
> Subject:  The problem of Apache soap-2.1-rc1 on SSL
>
>
>
> I tried to execute the messaging sample.
> On plain HTTP, it was OK.
> However, when trying it over SSL, I got an error, which says that the
> server certificate is untrusted.
>
> Does anybody have an idea to solve this problem?
> Also, does anybody have sample code for testing the apache SSL support?
> Please send me, if any.
> Any help is welcome.
>
> The client side command is below:
>      java samples.messaging.SendMessage
> https://[host_name]:443/soap/servlet/messagerouter msg1.xml
>
> The client side error is as follows:
> ----------------------------------------------------------------------------
-----------
>
> java.lang.reflect.InvocationTargetException: javax.net.ssl.SSLException:
> untrust
> ed server cert chain
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a
> ([DashoPro-V1.2-120198])
>         at com.sun.net.ssl.internal.ssl.ClientHandshaker.a
> ([DashoPro-V1.2-120198
> ])
>         at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage
> ([DashoPr
> o-V1.2-120198])
>         at com.sun.net.ssl.internal.ssl.Handshaker.process_record
> ([DashoPro-V1.2
> -120198])
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a
> ([DashoPro-V1.2-120198])
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a
> ([DashoPro-V1.2-120198])
>         at com.sun.net.ssl.internal.ssl.AppOutputStream.write
> ([DashoPro-V1.2-120
> 198])
>         at java.io.OutputStream.write(OutputStream.java:61)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake
> ([DashoPro-V
> 1.2-120198])
>         at
> org.apache.soap.util.net.SSLUtils.buildSSLSocket(SSLUtils.java:98)
>         at java.lang.reflect.Method.invoke(Native Method)
>         at
> org.apache.soap.util.net.HTTPUtils.buildSocket(HTTPUtils.java:117)
>         at org.apache.soap.util.net.HTTPUtils.post(HTTPUtils.java:165)
>         at
> org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnec
> tion.java:208)
>         at org.apache.soap.messaging.Message.send(Message.java:120)
>         at samples.messaging.SendMessage.main(SendMessage.java:38)
> Exception in thread "main" [SOAPException: faultCode=SOAP-ENV:Client;
> msg=Error
> opening socket: null; targetException=java.lang.IllegalArgumentException:
> Error
> opening socket: null]
>         at
> org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnec
> tion.java:224)
>         at org.apache.soap.messaging.Message.send(Message.java:120)
>         at samples.messaging.SendMessage.main(SendMessage.java:38)
> ----------------------------------------------------------------------------
-----------
>
>
>
> Regards,
> Toshiro TAKASE
> Internet Technology, Tokyo Research Laboratory, IBM Research
> notes ID: Toshiro Takase/Japan/IBM@IBMJP, e-mail: E30809@jp.ibm.com
>
>
>
>