[prev in list] [next in list] [prev in thread] [next in thread]
List: axis-user
Subject: Using SSL with JAX-WS
From: "Philip Wilder" <philipwi () nortel ! com>
Date: 2009-04-27 13:32:24
Message-ID: F1A1D21DA394814E824AC89F5A005BA3178111E0 () zcarhxm0 ! corp ! nortel ! com
[Download RAW message or body]
Hello All,
I have been struggling a bit with Axis2 attempting to setup WebServices
over SSL. Admittedly I'm fairly new to SSL in general so forgive me if I
use some of the terminology incorrectly. Also apologies for what amounts
to a long read.
As far as I can tell there are two parts to this process:
(1) Serving up the WSDL over HTTPS.
(2) Serving Web Services over HTTPS.
With regards to (1) but I am having a problem with replaced
<soap:address /> element. While the hostname in the soap address field
is replaced properly as I would expect the port number defaults to 8080
(for testing purposes I am using port 8181). For example, if I connect
over the following address (names changed):
https://localhost:8443/axis2/services/WebService.WebServicePort?wsdl
the Soap Address line is written as follows:
<soap:address
location="http://localhost:8080/axis2/services/WebService.WebServicePort
/"/>
Similarly if I replace localhost with 127.0.0.1 the hostname is changed
but the port number is not. The port number *will* change but only after
I connect to it directly over http
(http://localhost:8181/axis2/services/WebService.WebServicePort?wsdl).
Is there any way to configure this behaviour in the axis2.xml config
file? I have attempted to change the port parameter in the
org.apache.axis2.transport.http.SimpleHTTPServer Transport receiver
without success. In fact, commenting out this entire element appears to
have no effect on communications. As a reminder, I am seeing this
problem while using JAX-WS, no testing has been done using another
binding mechanism.
For the curious a wsdl with the incorrect port specified maniftests
itself with the following error in the java client:
Exception in thread "main"
com.sun.xml.ws.client.ClientTransportException: HTTP transport error:
java.net.ConnectException: Connection refused: connect
at
com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpC
lientTransport.java:134)
at
com.sun.xml.ws.transport.http.client.HttpTransportPipe.process(HttpTrans
portPipe.java:140)
at
com.sun.xml.ws.transport.http.client.HttpTransportPipe.processRequest(Ht
tpTransportPipe.java:86)
at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:595)
at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:554)
at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:539)
at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:436)
at com.sun.xml.ws.client.Stub.process(Stub.java:248)
at
com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:135)
at
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.jav
a:109)
at
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.jav
a:89)
at
com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:118)
at $Proxy30.deviceGet(Unknown Source)
at com.nortel.ltp.CmdClient.getDevice(CmdClient.java:41)
at com.nortel.ltp.CmdClient.main(CmdClient.java:29)
Caused by: java.net.ConnectException: Connection refused:
connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at
java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
at
java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
at
java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
at java.net.Socket.connect(Socket.java:520)
at java.net.Socket.connect(Socket.java:470)
at
sun.net.NetworkClient.doConnect(NetworkClient.java:157)
at
sun.net.www.http.HttpClient.openServer(HttpClient.java:388)
at
sun.net.www.http.HttpClient.openServer(HttpClient.java:523)
at
sun.net.www.http.HttpClient.<init>(HttpClient.java:231)
at sun.net.www.http.HttpClient.New(HttpClient.java:304)
at sun.net.www.http.HttpClient.New(HttpClient.java:321)
at
sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConn
ection.java:813)
at
sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnecti
on.java:792)
at
sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.ja
va:690)
at
sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConne
ction.java:857)
at
com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpC
lientTransport.java:122)
... 14 more
This brings us to the second part of the problem (2). What is the best
way to serve the WebService over HTTPS? My instincts tell me that the
org.apache.axis2.transport.http.SimpleHTTPServer transport receiver is
not the correct choice which leaves me with the
org.apache.axis2.transport.nhttp.HttpCoreNIOSSLListener. Is there some
documentation to walk me through this process? If not, are there any
brave souls that have tread this path before me willing to share some of
their insights?
Any help would be appreciated.
Thanks,
Philip
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Using SSL with JAX-WS</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hello All, </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I have been struggling a bit with Axis2 attempting to \
setup WebServices over SSL. Admittedly I'm fairly new to SSL in general so forgive me \
if I use some of the terminology incorrectly. Also apologies for what amounts to a \
long read. </FONT></P>
<P><FONT SIZE=2 FACE="Arial">As far as I can tell there are two parts to this \
process:</FONT> </P>
<P><FONT SIZE=2 FACE="Arial">(1) Serving up the WSDL over HTTPS.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">(2) Serving Web Services over HTTPS.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">With regards to (1) but I am having a problem with \
replaced <soap:address /> element. While the hostname in the soap address field \
is replaced properly as I would expect the port number defaults to 8080 (for testing \
purposes I am using port 8181). For example, if I connect over the following address \
(names changed): </FONT></P> <UL>
<P><A HREF="https://localhost:8443/axis2/services/WebService.WebServicePort?wsdl"><U><FONT \
COLOR="#0000FF" SIZE=2 \
FACE="Arial">https://localhost:8443/axis2/services/WebService.WebServicePort?wsdl</FONT></U></A><FONT \
SIZE=2 FACE="Arial"> </FONT> </P>
</UL>
<P><FONT SIZE=2 FACE="Arial">the Soap Address line is written as follows:</FONT>
</P>
<UL>
<P><FONT SIZE=2 FACE="Arial"><soap:address location="<A \
HREF="http://localhost:8080/axis2/services/WebService.WebServicePort/">http://localhost:8080/axis2/services/WebService.WebServicePort/</A>"/></FONT>
</P>
</UL>
<P><FONT SIZE=2 FACE="Arial">Similarly if I replace localhost with 127.0.0.1 the \
hostname is changed but the port number is not. The port number *will* change but \
only after I connect to it directly over http (</FONT><A \
HREF="http://localhost:8181/axis2/services/WebService.WebServicePort?wsdl"><U><FONT \
COLOR="#0000FF" SIZE=2 \
FACE="Arial">http://localhost:8181/axis2/services/WebService.WebServicePort?wsdl</FONT></U></A><FONT \
SIZE=2 FACE="Arial">). Is there any way to configure this behaviour in the axis2.xml \
config file? I have attempted to change the port parameter in the</FONT> <FONT SIZE=2 \
FACE="Courier New">org.apache.axis2.transport.http.SimpleHTTPServer</FONT> <FONT \
SIZE=2 FACE="Arial">Transport receiver without success. In fact, commenting out this \
entire element appears to have no effect on communications. As a reminder, I am \
seeing this problem while using JAX-WS, no testing has been done using another \
binding mechanism. </FONT></P>
<P><FONT SIZE=2 FACE="Arial">For the curious a wsdl with the incorrect port specified \
maniftests itself with the following error in the java client:</FONT> </P>
<UL>
<P><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">Exception in thread \
"main"</FONT><U> <FONT COLOR="#000080" SIZE=2 FACE="Courier \
New">com.sun.xml.ws.client.ClientTransportException</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">: HTTP transport error:</FONT><U> <FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">java.net.ConnectException</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">: Connection refused: connect</FONT></P>
<P> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier \
New">HttpClientTransport.java:134</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.transport.http.client.HttpTransportPipe.process(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpTransportPipe.java:140</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.transport.http.client.HttpTransportPipe.processRequest(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpTransportPipe.java:86</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.api.pipe.Fiber.__doRun(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Fiber.java:595</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.api.pipe.Fiber._doRun(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Fiber.java:554</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.api.pipe.Fiber.doRun(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Fiber.java:539</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.api.pipe.Fiber.runSync(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Fiber.java:436</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.client.Stub.process(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Stub.java:248</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.client.sei.SEIStub.doProcess(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">SEIStub.java:135</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">SyncMethodHandler.java:109</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">SyncMethodHandler.java:89</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.sun.xml.ws.client.sei.SEIStub.invoke(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">SEIStub.java:118</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at $Proxy30.deviceGet(Unknown Source)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.nortel.ltp.CmdClient.getDevice(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">CmdClient.java:41</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at com.nortel.ltp.CmdClient.main(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">CmdClient.java:29</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR><FONT COLOR="#FF0000" SIZE=2 FACE="Courier New">Caused by:</FONT><U> <FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">java.net.ConnectException</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">: Connection refused: connect</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.PlainSocketImpl.socketConnect(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">Native Method</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.PlainSocketImpl.doConnect(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">PlainSocketImpl.java:333</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.PlainSocketImpl.connectToAddress(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">PlainSocketImpl.java:195</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.PlainSocketImpl.connect(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">PlainSocketImpl.java:182</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.Socket.connect(</FONT><U><FONT COLOR="#000080" SIZE=2 \
FACE="Courier New">Socket.java:520</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at java.net.Socket.connect(</FONT><U><FONT COLOR="#000080" SIZE=2 \
FACE="Courier New">Socket.java:470</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.NetworkClient.doConnect(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">NetworkClient.java:157</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.www.http.HttpClient.openServer(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpClient.java:388</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.www.http.HttpClient.openServer(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpClient.java:523</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.www.http.HttpClient.<init>(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpClient.java:231</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.www.http.HttpClient.New(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">HttpClient.java:304</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at sun.net.www.http.HttpClient.New(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">HttpClient.java:321</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpURLConnection.java:813</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
sun.net.www.protocol.http.HttpURLConnection.plainConnect(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpURLConnection.java:792</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
sun.net.www.protocol.http.HttpURLConnection.connect(</FONT><U><FONT COLOR="#000080" \
SIZE=2 FACE="Courier New">HttpURLConnection.java:690</FONT></U><FONT COLOR="#FF0000" \
SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
sun.net.www.protocol.http.HttpURLConnection.getOutputStream(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier New">HttpURLConnection.java:857</FONT></U><FONT \
COLOR="#FF0000" SIZE=2 FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">at \
com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(</FONT><U><FONT \
COLOR="#000080" SIZE=2 FACE="Courier \
New">HttpClientTransport.java:122</FONT></U><FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">)</FONT>
<BR> <FONT COLOR="#FF0000" SIZE=2 \
FACE="Courier New">... 14 more</FONT> </P>
</UL>
<P><FONT SIZE=2 FACE="Arial">This brings us to the second part of the problem (2). \
What is the best way to serve the WebService over HTTPS? My instincts tell me that \
the</FONT> <FONT SIZE=2 FACE="Courier \
New">org.apache.axis2.transport.http.SimpleHTTPServer</FONT> <FONT SIZE=2 \
FACE="Arial">transport receiver is not the correct choice which leaves me with \
the</FONT> <FONT SIZE=2 FACE="Courier \
New">org.apache.axis2.transport.nhttp.HttpCoreNIOSSLListener</FONT><FONT SIZE=2 \
FACE="Arial">. Is there some documentation to walk me through this process? If not, \
are there any brave souls that have tread this path before me willing to share some \
of their insights?</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Any help would be appreciated.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Thanks,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Philip</FONT>
</P>
</BODY>
</HTML>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic