I am using SOAP message over HTTPS. Our architecture:Client submission server uses TOMCAT 4.1..29, JDK 1.4.2 with JSSEI am using com.sun.net. ssl.HttpsURLConnection object to open url connection with submission server.Submsiion server at the other end has IIS configred to authenticate digital ...
229 byte By
nktowera at 2007-11-26 22:59:36
OK, I've ben provided with a certificate in a .p12 file PKCS12 What do I have to do with keytool to make it usable? I suspect that there are multiple steps, i.e. create a jssecacerts file first, then load the .P12?
1629 byte By
auiagmana at 2007-11-26 23:00:49
Hi All,I am having some code like this to connect to remote HTTPS server. And it works perfect in my machine. However, after I moved my code into our server which is running IBM Websphere, my code doesn't work anymore, and always get SSL handshake error, like ...
3385 byte By
knovaka at 2007-11-26 23:02:38
Hy everyone, I have next java code to send xml file over https. // Create a trust manager that does not validate certificate chainsTrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null;}public ...
294 byte By
DaleGroa at 2007-11-26 23:15:54
if I generate a container of keys with they keytool and a security certificate that lasts 30 days, in a pair of archives kerStore and certificate, how can I renew these keys for more number of day, from a class, not from the keytool ? O_othanks for your help!!!
3479 byte By
nktowera at 2007-11-26 23:54:09
Thanks to response to previous posting, I've gotten slightly further. Things improved when I updated my environment from 1.5 to 1.6Now I have this situation - an IO exception that says the password is not ASCII. Huh? The password works just fine with keytool (see below).Code snippet follows. ...
HiI am trying to use SSLEngine API to have secure socket communication. During initial handshake I am getting this errorjavax.net.ssl.SSLException: Received fatal alert: certificate_unknownwhat iam doing is the following1. Generating a keystore file using keytool -genkey -keystore ssl2. ...
Dear All,With trusted root certificate my swing client authenticates the server and handshake is done perfectly, I am sending a hashtable to the servlet in the OutputStream / servlet side is ServletInputStream (request.getInputStream), Check the below code at Swing clientpublic void ...
379 byte By
DaleGroa at 2007-11-27 0:17:24
hihow I can do if I do not want to use keystores in my application. If I want to create dynamically pair of keys for my application with SSL? (specifically to work with RMI SSL )Spanishcomo puedo crear dinamicamente las llaves necesarias para trabajar con SSL si no quiero tenerlas guardadas en ...
91 byte By
bkrsa at 2007-11-27 0:49:24
I need the sample java code to download server certs on sun one directory server 5.2
I have an SSL server that works properly when I create the SSLServerSocket withServerSocketFactory ssocketFactory = ServerSocketFactory.getDefault();sslServer = ssocketFactory.createServerSocket(sslPort);And I use VM parameters that point to the keystore, ...
Hi, I'm getting this awful message and am quite stuck.I have imported the server's certificate into a keystore file and put it in $ORACLE_HOME/javavm/lib/security.Have copied cacerts from JAVA_HOME to here.Have edited java.security to add ...
1078 byte By
tscalesa at 2007-11-27 1:14:25
Need run Client within running JBoss server, to connect to multiple web services on other servers. Only option I see is to set system properties "javax.net.ssl.keyStore", "javax.net.ssl.keyStorePassword", etc. But access to System properties is not synchronized and I may very well have two ...
Hello,How can I use URLConnection over SSL?Can you show me a simple example?Best regards,Eric
1700 byte By
Sozzleda at 2007-11-27 1:27:04
Hello all,I'm trying to connect to a webservice on a secure server from my test server using client-server authentication with certificates. When the client certificate is passed over to the secure server, the secure server assigns it a user name and password and then passes it over to the the ...
I have an SSL Server i wrote that uses a serverTrust keystore. I create the SSLContext and initialize it with my TrustManager and KeyManager arrays. What I noticed is that now I have an SSL Context that is bound to the serverTrust keystore I used to create the TrustManager. This Context then ...
I have a client/server connection using SSL/TLS, with a (different) self-signed cert at the client and server. When I don't set client authentication required, it works fine. When I set client authentication required, the server throws a Null Pointer Exception when it tries to get the output ...
58022 byte By
Athakkara at 2007-11-27 1:33:44
I am using JSSE for submit https request to Quickbooks.Here is code of Test JSSE Client for connecting to other web hosted system, I am getting error when Out strreaming the request means in following line in below code:-OutputStream os = con.getOutputStream(); // > Error ...
I am having protocol difficulties connecting a JSSE client to an OpenSSL server. Here is what I have tried so far with the accompanying results:JSSE client code:KeyStore keyStore = KeyStore.getInstance("JKS");keyStore.load(new FileInputStream(fileName), new ...
Hello, I am tying to use the SSLContext class in a nonblocking IO application with "TLS" protocol in Server mode. I am seeing a "no cipher suites in common" error message during the handshake.The Client is requesting for "TLS_RSA_WITH_RC4_128_MD5" but this cipher is not available (verified from ...
HiSometimes when a channel is unregistered from a particular selector (key.cancel() ) and then registered with another selector, the registration does not happen. It just blocks in that registration method..It does not execute after that..I am ...
954 byte By
Tata at 2007-11-27 2:33:12
Hi all,I have a question with the settings of security provider for one of our Java applications. The application uses a hardware cyrpto token for certain crypto operations. Now, we need to add the BouncyCastle security provider to handle the SSL connection (in particular, we need the latest ...
514 byte By
java80a at 2007-11-27 2:33:34
Hi,I have to implement the SSL protocol in java.As the SSL consists of 2 layers:Handshake and Record Protocol,I need to implement both of them.I have got lots of examples on Handshake protocol and was successfully able to write the code for handshake protocol.My problem is I am not ...
214 byte By
pkta at 2007-11-27 2:49:41
Hi All A digital certificate has public keys. But what i am not able to understand is where is the private key stored. Please anyone can help me out on this issueThanks and RegardsPankaj
268 byte By
gcpbsba at 2007-11-27 2:50:17
Hi,I have an HTTP server that I can't change its configuration to provide client authentication by my web server.Is there some way to check by java code if request is provided by a trusted client that is in my truststore?Thanks in advance.
Java Swing client through HTTPSURLConnection talks to a load-balancer server (Apache 2.2.3 with mod_ssl /openSSL 0.9.8) running 443 port which inturn forwards request to 2 JBoss servers (Webserver Tomcat) running in 8080 port. Above is the setup When I send a Object through ...
Life was good when our clients and server were running java 1.5.X. Now after some of our clients have upgraded to 1.6.0_1, life isn't so good.I am seeing seemingly random exceptions that appear to be generated down in the guts of the https api layer. I could use your help.Please, I appreciate ...
2360 byte By
pkta at 2007-11-27 3:12:40
Hi All I am writing a server that will use SSLSocket. I am new to this. I have created the server private key, public key, dummy client private key, public key. Now the problem is that to create a SSLSocket i am using the client public key which i created, but the problem is that in mycase all ...
2821 byte By
dj242a at 2007-11-27 3:54:59
We are having a problem with establishing a mutually (client) authenticated SSL connection between Java clients and a server. The aspect of our solution that differs from much of the information we can find on Java and SSL connections is that we are using certificates that are in the Microsoft ...
Hi,How do I handle this exception, when the user clicks "Cancel" upon SSL Client authentication when prompted for a certificate.javax.net.ssl.SSLHandshakeException: null cert chainTomcat throws this exception, but I would like to catch it and redirect the user to a proper error page. The full ...
421 byte By
hayamia at 2007-11-27 4:19:27
Hi, I am working on an application that requires Server and Client to communicate using SSL. I have managed to get the codes to create the link. Now I have one problem. As both the Server and Clients requires each other's certificate for authentication, how can I have the application to ...
2512 byte By
Masia at 2007-11-27 4:20:12
Dear allWe use jsse connections with file based Pkcs12 Keystores for longer time.Now we d'like to replace these .p12 files with SmartCards.While the jsse 5 reference guide suggests:"To use a Smartcard as a keystore or trust store, set the javax.net.ssl.keyStoreType and ...
860 byte By
karlvra at 2007-11-27 4:22:11
I have encountered a problem in Java 1.6 with Java SSL servers and Diffie-Hellman key agreement, as compared to the same SSL servers in Java 1.5.Opera issues warnings if SSL connections do not meet its security standards. Java SSL servers in Java 1.5 use the following encryption protocol (as ...
I apologize if that is a stupid question but I'm trying to track down if this :com.sun.deploy.security.X509ExtendedDeployTrustManager.isSupportedAlgorithmwould use the installed openSSL codebase on a Linux server.Thanks.-Dennis
Hello,I have configured tomcat to use SSL exactly defined in how-to doc of apache tomcat.but when i give URL https://localhost:8443 its simple says page cannot b displayed....and when clientAuth is set to true...In case if i set clientAuth as false then it says There is problem with website ...
How may I extract just the private key from the keystore entry of a public/private key pair originally generated by keytool -genkey ?I know how to extract the certificate (-export), but my understanding is that is only the public key.Thanks for help.
Hi experts,I have configured HTTPS on my tomcat 4.1 web server.When I run tomcat as a console application it works fine, but when I run tomcat as a service it doesnt work.Please help me with this.ThanxDeepak
Hi AllI have code that runs as a stand-alone application. It makes a SOAP call to a server over HTTPS. My problem is that the same code fails on JBoss and I can't figure out why. My code belowSystem.setProperty("javax.net.ssl.keyStore", ...
I implemented a TrustStoreManager for an SSLServerSocket so that checkClientTrusted() returns if the cert is acceptable. But through debugging code I see that once checkClientTrusted() returns normally, it doesn't get invoked when a subsequent connection is made to the same server socket.This ...
helloI have a certificate already generate by the server and I do not know its alias, how I can make:- to export the server certificate from the certs keystore.with keytool: keytool -export -keystore "java.home"/lib/security/cacerts -alias jamie -file server.cerbut I had the error: alias does ...
2265 byte By
Klosea at 2007-11-27 5:19:05
Hello Everyone,Please help me out.I created the a code to get a https connection (eg: https://www.google.com)The following code works fine in jre 1.4.2_11 but when I post the code into jre 1.6.0_01-b06, I get the Exception:java.security.AccessControlException: access denied ...
helloI have a code it does not work and which enables to send an email via the server smtp.my problem it is that in my code I do not know how to negotiate the keys and the certificates of my server.String trustStorefile = "java.home"/lib/security/cacerts";String pwd = "changeit";String protocol ...
Hello, I am trying to make a server that listens for incoming data as well as be able to send data when certain conditions are triggered. I have managed to get only one to work at a time because I used endless loops to check for incoming data, but I cant figure out how to get it to do both ...
10563 byte By
Lepr8a at 2007-11-27 5:45:49
I must send a mail use a SMTP with SSL.This is an example of my code :public void sendMail(String destinatario,String mittente,String oggetto,String messaggio,String fileName,String fileNameInMail)throws Exception{if (protocol.equals("smtps")){ Security.addProvider( new ...
304 byte By
.@_a at 2007-11-27 6:06:43
Is there any way to retrieve the client certificate in an established SSL Client Authenticated Session? I am using Tomcat Web server 5.5 in which server and client authentication are enabled. Thanks.. If I am posting this question in wrong forum then please redirect me to the correct ...
Hi,I need the functionality that the serversocket gets the sockets inet addresses in the given port before the sevrer socket accept() method.Is there any possibility please let me know. Thanx in advance.Regards,Tiger
1307 byte By
cup_joea at 2007-11-27 6:24:02
Hi there,I need help making my private key in pkcs#8 to pkcs#8 PEM format. I've been stuck on this for a while any help is much appreciated! I've generated my private key using with the following: KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");keyGen.initialize(1024, new ...
Hi friends,In axis client, for stub I can set connection time out by stub.setTimeOutbut how to set read time out for the same?Or the setTimeOut acts as read time out itself and not connection time out?Please enlight me.Regards,ChintanAppreciate your help ...
Hallo!I have the following simple piece of code that simply should connect to my tomcat using SSL. However I always get a strange exception. I run it using the VM Parameter: -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol. The really strange thing is, that when I test it ...
Hi All, I am using apache's commons net for my FTP client program. I have no problems with that. Now how can i also add the SSL into this program. I am completely new with JSSE. Please provide me with pointers. Thank youPradeep