Hi,

Servicemix version :3.1-incubating
Jboss version : jboss-4.0.4GA
Deployment model: servicemix within jboss using servicemix-web.war
JDK version : 1.5_09

I am trying to implement the SSL and basic authentication at provider
endpoint.

I have followed the jboss wiki site
http://wiki.jboss.org/wiki/Wiki.jsp?page=SSLSetup
 option 2 ( SSL enabled on the server with self-signed client certs -) to
generate self signed certificates using keytool. 

The tomcat configuration in jboss is as follows

Copied both server.keystore and server.truststore to /server/xxx/conf and
updated the server.xml as follows

       <Connector port="8443" address="${jboss.bind.address}"
           maxThreads="100" strategy="ms" maxHttpHeaderSize="8192"
           emptySessionPath="true"
           scheme="https" secure="true" clientAuth="true"
           sslProtocol = "TLS"
           keystoreFile="${jboss.server.home.dir}/conf/server.keystore"
           keystorePass="changeit"  
           truststoreFile="${jboss.server.home.dir}/conf/server.truststore"
           truststorePass="changeit"
       />


The provider endpoint configuration is as follows.

<beans xmlns:http="http://servicemix.apache.org/http/1.0";
xmlns:test="http://www.test.com/test1"; >
        <http:endpoint service=" test:CheckService" endpoint="Check"
role="provider" soapVersion="1.1"
defaultMep="http://www.w3.org/2004/08/wsdl/in-out"; soap="false"
locationURI="https://localhost:8443/httpauth/sample.jsp";>
                <http:basicAuthentication>
                        <http:basicAuthCredentials username="role1" 
password="tomcat" />
                </http:basicAuthentication>
                <http:ssl>
                        <http:sslParameters keyStore="classpath:server.keystore"
keyStorePassword="changeit" trustStore="classpath:client.keystore"
trustStorePassword="changeit" keyAlias="serverkeys" />
                </http:ssl>
        </http:endpoint>
</beans>

When the provider endpoint is invoked the following exception is thrown

java.security.cert.CertificateParsingException: signed overrun, bytes = 67
        at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1691)
        at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:179)
        at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:90)
        at
java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:271)
        at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:704)
        at java.security.KeyStore.load(KeyStore.java:1150)
        at
org.apache.servicemix.http.processors.CommonsHttpSSLSocketFactory.createUnmanagedFactory(CommonsHttpSSLSocketFactory.java:119)
        at
org.apache.servicemix.http.processors.CommonsHttpSSLSocketFactory.<init>(CommonsHttpSSLSocketFactory.java:50)
        at
org.apache.servicemix.http.processors.ProviderProcessor.getHostConfiguration(ProviderProcessor.java:248)
        at
org.apache.servicemix.http.processors.ProviderProcessor.process(ProviderProcessor.java:168)
        at
org.apache.servicemix.common.AsyncBaseLifeCycle.doProcess(AsyncBaseLifeCycle.java:489)
        at
org.apache.servicemix.common.AsyncBaseLifeCycle.processExchange(AsyncBaseLifeCycle.java:441)
        at
org.apache.servicemix.common.BaseLifeCycle.onMessageExchange(BaseLifeCycle.java:46)
        at
org.apache.servicemix.jbi.messaging.DeliveryChannelImpl.processInBound(DeliveryChannelImpl.java:593)
        at
org.apache.servicemix.jbi.nmr.flow.AbstractFlow.doRouting(AbstractFlow.java:174)
        at
org.apache.servicemix.jbi.nmr.flow.seda.SedaFlow.doRouting(SedaFlow.java:176)
        at
org.apache.servicemix.jbi.nmr.flow.seda.SedaQueue$1.run(SedaQueue.java:134)
        at
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
        at
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
        at java.lang.Thread.run(Thread.java:595)


Any help to resolve this exception.

-- 
View this message in context: 
http://www.nabble.com/SSL-and-basic-authentication-at-http-provider-endpoint-tf4821025s12049.html#a13792538
Sent from the ServiceMix - User mailing list archive at Nabble.com.

Reply via email to