SSL problems - has anyone been successful???

["Braginsky, Leo" <lb...@akamai.com>]

Guys, 
 
I am as much confused as I am frustrated. 
I've seen many messages on the SSL subject ranging from "how to start?" to
"almost there, but not quite." The latter is my case as well. So, my
question is: HAS ANYONE BEEN SUCCESSFUL in making Java client (bean, EJB,
JSP) to communicate with SOAP server using Apache/SOAP 2.0 (or 2.1)
framework? I did find a bunch of info sources on the Web that address this
issue, but despite the plentiful theoretical insight I've been unable to
make SOAP connection over SSL happen. 
So, if anyone has succeeded in doing this, can this person please take a few
minutes to describe ALL the steps that he took. I'm sure the entire mailing
list will appreciate this. 
 
P.S. My current problem is that it seems that the client contacts SSL server
in clear text. That's what the Snoop tool that we run on the server tells
us. 
 

Re: SSL problems - has anyone been successful???

[Olivier Brand <ol...@intraware.com>]

Leo,

I have been able to configure SSL with SOAP. I am using:

- Suitespot (or iPlanet) as the Web Server
- WebLogic as the app server
- JSSE as the SSL toolkit

The hardest piece was not the SOAP layer (if you look at the source
code, you will understand why) but at the WebServer and Java layer.
Understanding certificates are not a piece of cake... The java layer
(using keytool for registering the certificates) needs to be matsred as
well.
In some scenarios, I was unable to configure the certificate layer but
this is not due to SOAP.

I advise you to use the -Djavax.net.debug=all flag to see what happens
between the socket layer of the client and the web server. Without this,
I don't see any problem resolution possible.

Olivier

"Braginsky, Leo" wrote:

>  Guys, I am as much confused as I am frustrated. I've seen many
> messages on the SSL subject ranging from "how to start?" to "almost
> there, but not quite." The latter is my case as well. So, my question
> is: HAS ANYONE BEEN SUCCESSFUL in making Java client (bean, EJB, JSP)
> to communicate with SOAP server using Apache/SOAP 2.0 (or 2.1)
> framework? I did find a bunch of info sources on the Web that address
> this issue, but despite the plentiful theoretical insight I've been
> unable to make SOAP connection over SSL happen. So, if anyone has
> succeeded in doing this, can this person please take a few minutes to
> describe ALL the steps that he took. I'm sure the entire mailing list
> will appreciate this. P.S. My current problem is that it seems that
> the client contacts SSL server in clear text. That's what the Snoop
> tool that we run on the server tells us.

Re: SSL problems - has anyone been successful???

[Olivier Brand <ol...@intraware.com>]

Leo,

I have been able to configure SSL with SOAP. I am using:

- Suitespot (or iPlanet) as the Web Server
- WebLogic as the app server
- JSSE as the SSL toolkit

The hardest piece was not the SOAP layer (if you look at the source
code, you will understand why) but at the WebServer and Java layer.
Understanding certificates are not a piece of cake... The java layer
(using keytool for registering the certificates) needs to be matsred as
well.
In some scenarios, I was unable to configure the certificate layer but
this is not due to SOAP.

I advise you to use the -Djavax.net.debug=all flag to see what happens
between the socket layer of the client and the web server. Without this,
I don't see any problem resolution possible.

Olivier

"Braginsky, Leo" wrote:

>  Guys, I am as much confused as I am frustrated. I've seen many
> messages on the SSL subject ranging from "how to start?" to "almost
> there, but not quite." The latter is my case as well. So, my question
> is: HAS ANYONE BEEN SUCCESSFUL in making Java client (bean, EJB, JSP)
> to communicate with SOAP server using Apache/SOAP 2.0 (or 2.1)
> framework? I did find a bunch of info sources on the Web that address
> this issue, but despite the plentiful theoretical insight I've been
> unable to make SOAP connection over SSL happen. So, if anyone has
> succeeded in doing this, can this person please take a few minutes to
> describe ALL the steps that he took. I'm sure the entire mailing list
> will appreciate this. P.S. My current problem is that it seems that
> the client contacts SSL server in clear text. That's what the Snoop
> tool that we run on the server tells us.