java - Invoke a secured CA https SOAP service with a CXF client -
i'm trying invoke soap service published on secured server (apache/tomcat ssl , ca configured)
the service expect .p12 (pkcs#12) certificate handle authorization.
my test using soapui works (service invoked , returned correct result)
i guess i'v deal keytool load certificate within keystore i'm not able figure ou correctly.
in addition that, soapui running on top of jvm, , no need load certificate within jre keystore (as need point on p12 certificate), think there's way "load" certificate on demande @ invokation time ?
after investigations, seems there's cxf configurations (documentation)
code : github repository
vm arguments :
-djavax.net.ssl.keystoretype=pkcs12 -djavax.net.ssl.keystore=c:/job/cdbxxx-xxxxx.p12 -djavax.net.ssl.keystorepassword=******
logs (more here):
main, send tlsv1 alert: fatal, description = certificate_unknown main, write: tlsv1 alert, length = 2 main, called closesocket() main, handling exception: javax.net.ssl.sslhandshakeexception: sun.security.validator.validatorexception: pkix path building failed: sun.security.provider.certpath.suncertpathbuilderexception: unable find valid certification path requested target main, called close() main, called closeinternal(true)
thank's
javax.net.ssl.sslhandshakeexception means have 1 of these problems :
- the client key not signed 1 of cas in server trust store.
- the client key signed intermediate ca , don't have full ca chain in server trust store.
Comments
Post a Comment