You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by "Bc. Jiří Mikulášek" <ji...@aura.cz> on 2007/12/13 14:22:17 UTC

Securing server

Hi all,

I would like to secure my server and started with first*https sample.

Here is my configuration below, but I am still getting this error:
cvc-complex-type.2.4.c: The matching wildcard is strict, but no declaration 
can be found for element 'httpj:engine-factory'.

Have somebody any idea? I have also checked xsd in modules and it seems to be 
ok.

thanks a lot

<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans 
http://www.springframework.org/schema/beans/spring-beans-2.0.xsd 
http://cxf.apache.org/transports/http/configuration 
http://cxf.apache.org/schemas/configuration/http-conf.xsd"
	xmlns:http-conf="http://cxf.apache.org/transports/http/configuration"
	xmlns:sec="http://cxf.apache.org/configuration/security"
	xmlns:httpj="http://cxf.apache.org/transports/http-jetty/configuration">
<httpj:engine-factory bus="cxf">
   <httpj:engine port="8090">
    <httpj:tlsServerParameters>
      <sec:keyManagers keyPassword="qwerty@1234">
           <sec:keyStore type="JKS" password="qwerty@1234" 
                file="/home/mikulasek/Desktop/mcc.jks"/>
      </sec:keyManagers>
      <sec:trustManagers>
          <sec:keyStore type="JKS" password="qwerty@1234"
               file="/home/mikulasek/Desktop/mcc.jks"/>
      </sec:trustManagers>
      <sec:cipherSuitesFilter>
        <!-- these filters ensure that a ciphersuite with
          export-suitable or null encryption is used,
          but exclude anonymous Diffie-Hellman key change as
          this is vulnerable to man-in-the-middle attacks -->
        <sec:include>.*_EXPORT_.*</sec:include>
        <sec:include>.*_EXPORT1024_.*</sec:include>
        <sec:include>.*_WITH_DES_.*</sec:include>
        <sec:include>.*_WITH_NULL_.*</sec:include>
        <sec:exclude>.*_DH_anon_.*</sec:exclude>
      </sec:cipherSuitesFilter>
      <sec:clientAuthentication want="true" required="true"/>
    </httpj:tlsServerParameters>
   </httpj:engine>
  </httpj:engine-factory>

</beans>
-- 
Jiri Mikulasek
---------------------------------
Developer

AURA, s.r.o.
Uvoz 499/56; 602 00 Brno
ISO 9001 certified company
AQAP 2110 (ČOS 051622)
tel./fax: +420 544 508 115
e-mail:  mikulasek@aura.cz
http://www.aura.cz
---------------------------------

Re: Securing server

Posted by "Bc. Jiří Mikulášek" <ji...@aura.cz>.
Hi again,
sorry I forgot to add new namesapce to schemaLocation also and could not catch 
this trivial mistake for a long time

On Thursday 13 of December 2007 14:22:17 Bc. Jiří Mikulášek wrote:
> Hi all,
>
> I would like to secure my server and started with first*https sample.
>
> Here is my configuration below, but I am still getting this error:
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no declaration
> can be found for element 'httpj:engine-factory'.
>
> Have somebody any idea? I have also checked xsd in modules and it seems to
> be ok.
>
> thanks a lot
>
> <beans xmlns="http://www.springframework.org/schema/beans"
> 	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> 	xsi:schemaLocation="http://www.springframework.org/schema/beans
> http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
> http://cxf.apache.org/transports/http/configuration
> http://cxf.apache.org/schemas/configuration/http-conf.xsd"
> 	xmlns:http-conf="http://cxf.apache.org/transports/http/configuration"
> 	xmlns:sec="http://cxf.apache.org/configuration/security"
> 	xmlns:httpj="http://cxf.apache.org/transports/http-jetty/configuration">
> <httpj:engine-factory bus="cxf">
>    <httpj:engine port="8090">
>     <httpj:tlsServerParameters>
>       <sec:keyManagers keyPassword="qwerty@1234">
>            <sec:keyStore type="JKS" password="qwerty@1234"
>                 file="/home/mikulasek/Desktop/mcc.jks"/>
>       </sec:keyManagers>
>       <sec:trustManagers>
>           <sec:keyStore type="JKS" password="qwerty@1234"
>                file="/home/mikulasek/Desktop/mcc.jks"/>
>       </sec:trustManagers>
>       <sec:cipherSuitesFilter>
>         <!-- these filters ensure that a ciphersuite with
>           export-suitable or null encryption is used,
>           but exclude anonymous Diffie-Hellman key change as
>           this is vulnerable to man-in-the-middle attacks -->
>         <sec:include>.*_EXPORT_.*</sec:include>
>         <sec:include>.*_EXPORT1024_.*</sec:include>
>         <sec:include>.*_WITH_DES_.*</sec:include>
>         <sec:include>.*_WITH_NULL_.*</sec:include>
>         <sec:exclude>.*_DH_anon_.*</sec:exclude>
>       </sec:cipherSuitesFilter>
>       <sec:clientAuthentication want="true" required="true"/>
>     </httpj:tlsServerParameters>
>    </httpj:engine>
>   </httpj:engine-factory>
>
> </beans>



-- 
Jiri Mikulasek
---------------------------------
Developer

AURA, s.r.o.
Uvoz 499/56; 602 00 Brno
ISO 9001 certified company
AQAP 2110 (ČOS 051622)
tel./fax: +420 544 508 115
e-mail:  mikulasek@aura.cz
http://www.aura.cz
---------------------------------