You are viewing a plain text version of this content. The canonical link for it is here.
Posted to stonehenge-dev@incubator.apache.org by Chintana Wilamuna <ch...@gmail.com> on 2010/02/01 09:51:11 UTC
Re: WSO2 Testing
On Thu, Jan 28, 2010 at 8:48 AM, Ben Dewey <Be...@26ny.com> wrote:
> I am using wsas3.0
Ben,
I was able to get this running according to
http://markmail.org/message/kkvo5tabwvsobhpc with a few additional
steps. Sorry, I've missed those. (numbering is according to the
numbers in the above link).
7.5 Import BS.jks and OPS.jks in <stonehenge
trunk>\stocktrader\wsas\resources\conf
7.5.1 Go to https://localhost:9443/carbon and login as admin.
Username: admin, password: admin.
7.5.2 Click on Key Stores -> Add New Key Store. For BS.jks
password is 'yyy'. For OPS.jks password is 'password'.
Like I said on a previous mail, I had to change the certificate to
OPS.Com in the WSAS business service. I did not commit it since I'm
not sure whether the change of certificate in the .Net trader client
is deliberate.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
Chintana,
I've added web.NET.config and web.WSIS.config files that I'm using for the trader client. Feel free to commit updates to these files there is anything that looks wrong.
Thanks,
Ben Dewey
-----Original Message-----
From: Ben Dewey [mailto:Ben.Dewey@26ny.com]
Sent: Wednesday, February 10, 2010 8:43 PM
To: stonehenge-dev@incubator.apache.org
Subject: RE: WSO2 Testing
Sorry about that I had it commented out from previous tests. Now, I'm receiving a 500 error with the following message in the wsas log.
-------------------
[2010-02-10 20:33:47,099] ERROR - Must Understand check failed for header http:
//docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : S
ecurity {org.apache.axis2.engine.AxisEngine}
org.apache.axis2.AxisFault: Must Understand check failed for header http://docs.
oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : Security
Thanks,
-Ben Dewey
-----Original Message-----
From: Chintana Wilamuna [mailto:chintanaw@gmail.com]
Sent: Wednesday, February 10, 2010 12:06 AM
To: stonehenge-dev@incubator.apache.org
Subject: Re: WSO2 Testing
On Wed, Feb 10, 2010 at 9:28 AM, Ben Dewey <Be...@26ny.com> wrote:
> I tested WSAS again and this time I'm getting the following message connecting to the active_sts:
>
> General security error (SAML token security failure); nested exception is:
> org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod
Ben, make sure signature confirmation is turned off. Line 100 in
Web.config add requireSignatureConfirmation="false" attribute.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
Re: WSO2 Testing
Posted by Chintana Wilamuna <ch...@gmail.com>.
On Thu, Feb 11, 2010 at 8:09 AM, Ben Dewey <Be...@26ny.com> wrote:
>> Did you import the BS.jks and OPS.jks keystores from the WSAS
> management console?
>
> I hadn't, BS.jks imported successfully, but OPS.jks is failing to import with a password of 'yyy'
Try 'password' instead of 'yyy'.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
> Did you import the BS.jks and OPS.jks keystores from the WSAS
management console?
I hadn't, BS.jks imported successfully, but OPS.jks is failing to import with a password of 'yyy'
-Ben Dewey
Re: WSO2 Testing
Posted by Chintana Wilamuna <ch...@gmail.com>.
On Thu, Feb 11, 2010 at 9:18 AM, Ben Dewey <Be...@26ny.com> wrote:
> After adding the OPS and BS jks files I'm still receiving the 500 error. I'm attaching the aar file (also copying you personally since I think the list strips bin files).
I wanted to check the services.xml file. That seems to be fine. Ben, I
built .Net and WSAS again and tried to configure using the steps and
it worked. I blogged about the steps until we get this to the wiki -
http://engwar.com/post/264
Can you try with the WSAS latest version which is 3.1.2 please?
> Do I still need to add the thumbprint for the trusted issuer of localhost?
You need this when you want to point to the Identity Server passive
STS. You don't need this when you're talking to the .Net passive STS.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
> could you please attach <WSAS folder>\repository\services\TradeServiceWsas.aar?
Chintana,
After adding the OPS and BS jks files I'm still receiving the 500 error. I'm attaching the aar file (also copying you personally since I think the list strips bin files).
Do I still need to add the thumbprint for the trusted issuer of localhost?
Thanks,
-Ben Dewey
Re: WSO2 Testing
Posted by Chintana Wilamuna <ch...@gmail.com>.
On Thu, Feb 11, 2010 at 7:12 AM, Ben Dewey <Be...@26ny.com> wrote:
> Sorry about that I had it commented out from previous tests. Now, I'm receiving a 500 error with the following message in the wsas log.
>
> -------------------
> [2010-02-10 20:33:47,099] ERROR - Must Understand check failed for header http:
> //docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : S
> ecurity {org.apache.axis2.engine.AxisEngine}
> org.apache.axis2.AxisFault: Must Understand check failed for header http://docs.
> oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : Security
Did you import the BS.jks and OPS.jks keystores from the WSAS
management console? If that's already done and assuming you've
compiled the latest trunk, could you please attach <WSAS
folder>\repository\services\TradeServiceWsas.aar?
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
Sorry about that I had it commented out from previous tests. Now, I'm receiving a 500 error with the following message in the wsas log.
-------------------
[2010-02-10 20:33:47,099] ERROR - Must Understand check failed for header http:
//docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : S
ecurity {org.apache.axis2.engine.AxisEngine}
org.apache.axis2.AxisFault: Must Understand check failed for header http://docs.
oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : Security
Thanks,
-Ben Dewey
-----Original Message-----
From: Chintana Wilamuna [mailto:chintanaw@gmail.com]
Sent: Wednesday, February 10, 2010 12:06 AM
To: stonehenge-dev@incubator.apache.org
Subject: Re: WSO2 Testing
On Wed, Feb 10, 2010 at 9:28 AM, Ben Dewey <Be...@26ny.com> wrote:
> I tested WSAS again and this time I'm getting the following message connecting to the active_sts:
>
> General security error (SAML token security failure); nested exception is:
> org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod
Ben, make sure signature confirmation is turned off. Line 100 in
Web.config add requireSignatureConfirmation="false" attribute.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
Re: WSO2 Testing
Posted by Chintana Wilamuna <ch...@gmail.com>.
On Wed, Feb 10, 2010 at 9:28 AM, Ben Dewey <Be...@26ny.com> wrote:
> I tested WSAS again and this time I'm getting the following message connecting to the active_sts:
>
> General security error (SAML token security failure); nested exception is:
> org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod
Ben, make sure signature confirmation is turned off. Line 100 in
Web.config add requireSignatureConfirmation="false" attribute.
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
Chintana,
I tested WSAS again and this time I'm getting the following message connecting to the active_sts:
General security error (SAML token security failure); nested exception is:
org.opensaml.MalformedException: Subject is invalid, requires either NameIdentifier or at least one ConfirmationMethod
-Ben Dewey
RE: WSO2 Testing
Posted by Ben Dewey <Be...@26ny.com>.
Chintana,
Thanks, I am out of the country and will test when I return next Monday.
-Ben Dewey
________________________________________
From: Chintana Wilamuna [chintanaw@gmail.com]
Sent: Monday, February 01, 2010 9:21 AM
To: stonehenge-dev@incubator.apache.org
Subject: Re: WSO2 Testing
On Mon, Feb 1, 2010 at 3:21 PM, Chintana Wilamuna <ch...@gmail.com> wrote:
> Like I said on a previous mail, I had to change the certificate to
> OPS.Com in the WSAS business service. I did not commit it since I'm
> not sure whether the change of certificate in the .Net trader client
> is deliberate.
Ben, as Pablo explained on the other thread I changed the certificate
to OPS.Com in the WSAS business service. Could you please build again
after getting and update from the trunk please?
Thanks,
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana
Re: WSO2 Testing
Posted by Chintana Wilamuna <ch...@gmail.com>.
On Mon, Feb 1, 2010 at 3:21 PM, Chintana Wilamuna <ch...@gmail.com> wrote:
> Like I said on a previous mail, I had to change the certificate to
> OPS.Com in the WSAS business service. I did not commit it since I'm
> not sure whether the change of certificate in the .Net trader client
> is deliberate.
Ben, as Pablo explained on the other thread I changed the certificate
to OPS.Com in the WSAS business service. Could you please build again
after getting and update from the trunk please?
Thanks,
Bye,
-Chintana
--
Blog: http://engwar.com/
Photos: http://flickr.com/photos/chintana