hi nilesh,
 
yes, you can use apache soap to build https clients. The following steps will help you 
getting it running (without client certificates):
 
- Add the Java Secure Socket Extension (JSSE) libraries (jsse.jar, jcert.jar, 
jnet.jar) to the classpath or to the folder jre\lib\ext.
- Allow "https" to be used in java.net.URL objects by setting the system property 
"java.protocol.handler.pkgs" to "com.sun.net.ssl.internal.www.protocol"
- Add the security provider "com.sun.net.ssl.internal.ssl.Provider" either statically 
in the jre\lib\security\java.security file or dynamically by using 
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider())
- Make sure the server certificates have a compatible format (Java Keystore is x.509 
compatible, but not really pkcs12)
- make sure the jre\lib\security\cacerts file accepts the server certificate.
 
See also  <http://xml.apache.org/soap/docs/install/FAQ_Tomcat_SOAP_SSL.html> 
http://xml.apache.org/soap/docs/install/FAQ_Tomcat_SOAP_SSL.html and Martin Center's 
posting "SSL Client Certificate Authentication" a couple of minutes ago.
 
bye
Ted
 
-----Original Message-----
From: Nilesh Kumar, Koratpallikar [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 17, 2002 1:57 PM
To: '[EMAIL PROTECTED]'
Subject: Can SOAP be used for building HTTPS clients ????


Hi,
 
I am trying to write a HTTPS client, which would talk to a secure site.  Wanted to 
know if I can use SOAP for building such a client ????.  Basically I was looking for 
some API's which would deal with complexities of SSL handshaking, authentication.
 
Any Inputs will be greatly appreciated.
 
thanx & reg
nilesh

Reply via email to