You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by nipa dadbhawala <ni...@gmail.com> on 2008/05/01 01:56:53 UTC

Axis2 accepting self signed certificate from the server

Hi All,

Is there any way I can make Axis2 accept server's self signed certificate? I
tried setting system property as

System.setProperty("axis.socketSecureFactory",
"org.apache.axis.components.net.SunFakeTrustSocketFactory");

and it did not work. I also found an old thread on this topic which says
SunFakeTrustSocketFactory is yet to be written for Axis2.

http://mail-archives.apache.org/mod_mbox/ws-axis-user/200706.mbox/%3C19e0530f0706050708y4db20decob9799fc0a390fbca@mail.gmail.com%3E

I am wondering if this is already written or is there any workaround for
this?

Any help will be appreciated.

Thanks,
Nipa

Re: Axis2 accepting self signed certificate from the server

Posted by nipa dadbhawala <ni...@gmail.com>.
Steve,

Thank you for your response. Yes I am aware that I could import the
certificate but I do not want that solution. I know in Axis 1.x, the
following worked.

AxisProperties.setProperty("axis.socketSecureFactory",
"org.apache.axis.components.net.SunFakeTrustSocketFactory");

I want to do something similar. But it doesn't seem to be
working with axis2 though.

Can you provide any details on how to override the ssl
implementation that requires this?

Thanks,
Nipa



On Thu, May 1, 2008 at 5:52 AM, <SG...@intellicare.com> wrote:

> Nipa,
>
> I'm afraid you're already aware of the two alternatives I know of: import
> the certificate (I think what you actually need is the certificate of the
> key used to self-sign the cert being used for SSL) or override the part of
> the SSL implementation that requires this.
>
> As for importing the certificate, are you having trouble importing it or
> configuring your client? Or is it unavailable?
>
> This link may be of some help:
> http://blogs.sun.com/andreas/entry/no_more_unable_to_find
>
> - Steve
>
> ______________________________________________
> Steve Gruverman
> IntelliCare, Inc. | A Medco Health Solutions Company
>
> 500 Southborough Drive | South Portland ME 04106
>
> "nipa dadbhawala" <ni...@gmail.com> wrote on 05/01/2008 12:58:14
> AM:
>
> > Hi Steve,
> >
> > I have a client trying to invoke a web service on a server which has
> > a self signed SSL certificate. I am trying to find a way which will
> > allow the application to use any self-signed certificates without
> > worrying about importing server's cert in the local keystore.
> >
> > Thanks,
> > Nipa
>
> > On Wed, Apr 30, 2008 at 7:46 PM, <SG...@intellicare.com> wrote:
> > Nipa,
> >
> > Could you be more specific about what you're using the certificate for -
> > WS-Security signing or encryption? or SSL to a stand-alone Axis2
> > server? or ...?
> >
> > I've been trying to get all three of those to work lately, so I may
> > be able to help if I know some more.
> >
> > - Steve
> > -----"nipa dadbhawala" <ni...@gmail.com> wrote: -----
> >
> > >To: "axis-user@ws.apache.org" <ax...@ws.apache.org>
> > >From: "nipa dadbhawala" <ni...@gmail.com>
> > >Date: 04/30/2008 07:56PM
> > >Subject: Axis2 accepting self signed certificate from the server
> > >
> > >Hi All,
> > >
> > >Is there any way I can make Axis2 accept server's self signed
> > >certificate? I tried setting system property as
> > >
> > >System.setProperty("axis.socketSecureFactory",
> > >"org.apache.axis.components.net.SunFakeTrustSocketFactory");
> > >
> > >and it did not work. I also found an old thread on this topic which
> > >says  SunFakeTrustSocketFactory is yet to be written for Axis2.
> > >
> > >http://mail-archives.apache.org/mod_mbox/ws-axis-user/200706.mbox/%3C
> > >19e0530f0706050708y4db20decob9799fc0a390fbca@mail.gmail.com%3E
> > >
> > >I am wondering if this is already written or is there any workaround
> > >for this?
> > >
> > >Any help will be appreciated.
> > >
> > >Thanks,
> > >Nipa
> > >
> > >MailScanner , and is
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org For
> > additional commands, e-mail: axis-user-help@ws.apache.org
> >
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
> For additional commands, e-mail: axis-user-help@ws.apache.org
>
>

Re: Axis2 accepting self signed certificate from the server

Posted by SG...@intellicare.com.
Nipa,

I'm afraid you're already aware of the two alternatives I know of: import
the certificate (I think what you actually need is the certificate of the
key used to self-sign the cert being used for SSL) or override the part of
the SSL implementation that requires this.

As for importing the certificate, are you having trouble importing it or
configuring your client? Or is it unavailable?

This link may be of some help:
http://blogs.sun.com/andreas/entry/no_more_unable_to_find

- Steve

______________________________________________
Steve Gruverman
IntelliCare, Inc. | A Medco Health Solutions Company

500 Southborough Drive | South Portland ME 04106

"nipa dadbhawala" <ni...@gmail.com> wrote on 05/01/2008 12:58:14
AM:

> Hi Steve,
>
> I have a client trying to invoke a web service on a server which has
> a self signed SSL certificate. I am trying to find a way which will
> allow the application to use any self-signed certificates without
> worrying about importing server's cert in the local keystore.
>
> Thanks,
> Nipa

> On Wed, Apr 30, 2008 at 7:46 PM, <SG...@intellicare.com> wrote:
> Nipa,
>
> Could you be more specific about what you're using the certificate for -
> WS-Security signing or encryption? or SSL to a stand-alone Axis2
> server? or ...?
>
> I've been trying to get all three of those to work lately, so I may
> be able to help if I know some more.
>
> - Steve
> -----"nipa dadbhawala" <ni...@gmail.com> wrote: -----
>
> >To: "axis-user@ws.apache.org" <ax...@ws.apache.org>
> >From: "nipa dadbhawala" <ni...@gmail.com>
> >Date: 04/30/2008 07:56PM
> >Subject: Axis2 accepting self signed certificate from the server
> >
> >Hi All,
> >
> >Is there any way I can make Axis2 accept server's self signed
> >certificate? I tried setting system property as
> >
> >System.setProperty("axis.socketSecureFactory",
> >"org.apache.axis.components.net.SunFakeTrustSocketFactory");
> >
> >and it did not work. I also found an old thread on this topic which
> >says  SunFakeTrustSocketFactory is yet to be written for Axis2.
> >
> >http://mail-archives.apache.org/mod_mbox/ws-axis-user/200706.mbox/%3C
> >19e0530f0706050708y4db20decob9799fc0a390fbca@mail.gmail.com%3E
> >
> >I am wondering if this is already written or is there any workaround
> >for this?
> >
> >Any help will be appreciated.
> >
> >Thanks,
> >Nipa
> >
> >MailScanner , and is
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org For
> additional commands, e-mail: axis-user-help@ws.apache.org
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org


Re: Axis2 accepting self signed certificate from the server

Posted by nipa dadbhawala <ni...@gmail.com>.
Hi Steve,

I have a client trying to invoke a web service on a server which has a self
signed SSL certificate. I am trying to find a way which will allow the
application to use any self-signed certificates without worrying about
importing server's cert in the local keystore.

Thanks,
Nipa

On Wed, Apr 30, 2008 at 7:46 PM, <SG...@intellicare.com> wrote:

> Nipa,
>
> Could you be more specific about what you're using the certificate for -
> WS-Security signing or encryption? or SSL to a stand-alone Axis2 server?
> or ...?
>
> I've been trying to get all three of those to work lately, so I may be
> able to help if I know some more.
>
> - Steve
> -----"nipa dadbhawala" <ni...@gmail.com> wrote: -----
>
> >To: "axis-user@ws.apache.org" <ax...@ws.apache.org>
> >From: "nipa dadbhawala" <ni...@gmail.com>
> >Date: 04/30/2008 07:56PM
> >Subject: Axis2 accepting self signed certificate from the server
> >
> >Hi All,
> >
> >Is there any way I can make Axis2 accept server's self signed
> >certificate? I tried setting system property as
> >
> >System.setProperty("axis.socketSecureFactory",
> >"org.apache.axis.components.net.SunFakeTrustSocketFactory");
> >
> >and it did not work. I also found an old thread on this topic which
> >says  SunFakeTrustSocketFactory is yet to be written for Axis2.
> >
> >http://mail-archives.apache.org/mod_mbox/ws-axis-user/200706.mbox/%3C
> >19e0530f0706050708y4db20decob9799fc0a390fbca@mail.gmail.com%3E
> >
> >I am wondering if this is already written or is there any workaround
> >for this?
> >
> >Any help will be appreciated.
> >
> >Thanks,
> >Nipa
> >
> >MailScanner , and is
> --------------------------------------------------------------------- To
> unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org For additional
> commands, e-mail: axis-user-help@ws.apache.org