java - Invoke a secured CA https SOAP service with a CXF client -


i'm trying invoke soap service published on secured server (apache/tomcat ssl , ca configured)

the service expect .p12 (pkcs#12) certificate handle authorization.

my test using soapui works (service invoked , returned correct result)

i guess i'v deal keytool load certificate within keystore i'm not able figure ou correctly.

in addition that, soapui running on top of jvm, , no need load certificate within jre keystore (as need point on p12 certificate), think there's way "load" certificate on demande @ invokation time ?

after investigations, seems there's cxf configurations (documentation)

code : github repository

vm arguments :

-djavax.net.ssl.keystoretype=pkcs12 -djavax.net.ssl.keystore=c:/job/cdbxxx-xxxxx.p12 -djavax.net.ssl.keystorepassword=****** 

logs (more here):

main, send tlsv1 alert:  fatal, description = certificate_unknown main, write: tlsv1 alert, length = 2 main, called closesocket() main, handling exception: javax.net.ssl.sslhandshakeexception:         sun.security.validator.validatorexception: pkix path building failed:          sun.security.provider.certpath.suncertpathbuilderexception: unable find valid         certification path requested target main, called close() main, called closeinternal(true) 

thank's

javax.net.ssl.sslhandshakeexception means have 1 of these problems :

  1. the client key not signed 1 of cas in server trust store.
  2. the client key signed intermediate ca , don't have full ca chain in server trust store.

Comments

Popular posts from this blog

basic authentication with http post params android -

vb.net - Virtual Keyboard commands -

css - Firefox for ubuntu renders wrong colors -