ebxmlms-general — General discussions

Re: [ebxmlms-general] MSH over SSL with Tomcat

[Gait B. <gai...@ti...>]

thnx Patrick,

adding the certificate to the cacerts for JRE did it.
I also tried setting the MSH-client communication to HTTPS, but that =
still gives me a "couldn't find trusted certificate" error. I was =
expecting this to use the same certificates and stores as for MSH-MSH =
loopback.

Gait.
  ----- Original Message -----=20
  From: Patrick Yee=20
  To: Patrick Yee=20
  Cc: EbXMLms List (E-mail)=20
  Sent: Wednesday, October 23, 2002 6:13 AM
  Subject: Re: [ebxmlms-general] MSH over SSL with Tomcat


  Sorry, I forgot to CC the answer to the list. Please find the answer =
below.

  And I want to further clarify 2 points:=20

  1. If computer A wish to connect to computer B using SSL, computer B =
should be pre-configured with SSL first, and computer B's public key =
should be imported into computer A's trusted keystore.
  2. In that case, the URL that computer A is using to connect should be =
using the same hostname or IP as the one computer B used to generate the =
key. I mean, if computer B use IP as CN to generate the key, computer A =
should use the URL with IP to connect. If computer B use hostname as CN, =
computer A should use hostname to connect.

  Regards, -Patrick
  --
  Patrick Yee
  System Architect
  Center for E-Commerce Infrastructure Development (CECID)
  Dept. of Computer Science and Information Systems
  The University of Hong Kong
  Tel: (852) 22415674
  Fax: (852) 25474611

    ----- Original Message -----=20
    From: Patrick Yee=20
    To: Gait Boxman=20
    Sent: Wednesday, October 23, 2002 12:07 PM
    Subject: Re: [ebxmlms-general] MSH over SSL with Tomcat


    Hi Gait,

    In our experience, you should do the following to make SSL on Tomcat =
to work.

    1. Generate key with alias to be "tomcat", and with CN to be the =
correct hostname or IP of the server
    2. specify the keystore details in Tomcat's configuration files.
    3. up to this point, you can test with a browser. You need to accept =
that cert on a prompt
    4. Export the public key of the generated keypair to a file using =
keytool
    5. Input the public key exported in (4) into a keystore located at =
the RECEIVING computer. The keystore is located at:
    $JAVA_HOME/jre/lib/security/cacerts. This keystore is the so-called =
trusted public keys recognized by the JRE.=20

    Step 5 is conceptually the same as accepting that cert on a prompt =
at browsers in step (3). One is for machine, one is for human.

    Hope this helps.

    Regards, -Patrick
    --
    Patrick Yee
    System Architect
    Center for E-Commerce Infrastructure Development (CECID)
    Dept. of Computer Science and Information Systems
    The University of Hong Kong
    Tel: (852) 22415674
    Fax: (852) 25474611

      ----- Original Message -----=20
      From: Gait Boxman=20
      To: ebx...@li...=20
      Sent: Wednesday, October 23, 2002 2:32 AM
      Subject: [ebxmlms-general] MSH over SSL with Tomcat


      Hi,

      I'm having some problems getting SSL to work with the MSH.
      I've set up tomcat with a certificate using 'keytool -genkey =
-alias tomcat -keyalg RSA'
      I entered my server name as the CN, and added some real values for =
the other X.500 fields.
      I enabled port 8443 in server.xml, and I managed to hook up to the =
MSH with https://my_server_name:8443/msh, after accepting the =
certificate in IE.
      I exported the key, and imported it into /tmp/cacerts. I took care =
of all the correct passwords, so that is working.
      I then tried the loopback.java with toMSHURL set to the url above, =
but that gives problems in tomcat, which tells me it can't find a =
trusted certificate. Running the same test over the normal http channel =
works fine. Did I miss something here, should I import the certificate =
to yet another store?

      TIA, Gait.

      PS Next test will be digital signatures, hints are welcome..
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Gait Boxman
      Manager Advanced Technology & Standards
      TIE Product Development BV
      Amsterdam, The Netherlands
      Tel: +31 20 658 9091  Fax: +31 20 658 9945
      E-mail: gai...@ti...  WWW: www.TIEglobal.com
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: [ebxmlms-general] MSH over SSL with Tomcat

[Patrick Y. <kc...@ce...>]

Sorry, I forgot to CC the answer to the list. Please find the answer =
below.

And I want to further clarify 2 points:=20

1. If computer A wish to connect to computer B using SSL, computer B =
should be pre-configured with SSL first, and computer B's public key =
should be imported into computer A's trusted keystore.
2. In that case, the URL that computer A is using to connect should be =
using the same hostname or IP as the one computer B used to generate the =
key. I mean, if computer B use IP as CN to generate the key, computer A =
should use the URL with IP to connect. If computer B use hostname as CN, =
computer A should use hostname to connect.

Regards, -Patrick
--
Patrick Yee
System Architect
Center for E-Commerce Infrastructure Development (CECID)
Dept. of Computer Science and Information Systems
The University of Hong Kong
Tel: (852) 22415674
Fax: (852) 25474611

  ----- Original Message -----=20
  From: Patrick Yee=20
  To: Gait Boxman=20
  Sent: Wednesday, October 23, 2002 12:07 PM
  Subject: Re: [ebxmlms-general] MSH over SSL with Tomcat


  Hi Gait,

  In our experience, you should do the following to make SSL on Tomcat =
to work.

  1. Generate key with alias to be "tomcat", and with CN to be the =
correct hostname or IP of the server
  2. specify the keystore details in Tomcat's configuration files.
  3. up to this point, you can test with a browser. You need to accept =
that cert on a prompt
  4. Export the public key of the generated keypair to a file using =
keytool
  5. Input the public key exported in (4) into a keystore located at the =
RECEIVING computer. The keystore is located at:
  $JAVA_HOME/jre/lib/security/cacerts. This keystore is the so-called =
trusted public keys recognized by the JRE.=20

  Step 5 is conceptually the same as accepting that cert on a prompt at =
browsers in step (3). One is for machine, one is for human.

  Hope this helps.

  Regards, -Patrick
  --
  Patrick Yee
  System Architect
  Center for E-Commerce Infrastructure Development (CECID)
  Dept. of Computer Science and Information Systems
  The University of Hong Kong
  Tel: (852) 22415674
  Fax: (852) 25474611

    ----- Original Message -----=20
    From: Gait Boxman=20
    To: ebx...@li...=20
    Sent: Wednesday, October 23, 2002 2:32 AM
    Subject: [ebxmlms-general] MSH over SSL with Tomcat


    Hi,

    I'm having some problems getting SSL to work with the MSH.
    I've set up tomcat with a certificate using 'keytool -genkey -alias =
tomcat -keyalg RSA'
    I entered my server name as the CN, and added some real values for =
the other X.500 fields.
    I enabled port 8443 in server.xml, and I managed to hook up to the =
MSH with https://my_server_name:8443/msh, after accepting the =
certificate in IE.
    I exported the key, and imported it into /tmp/cacerts. I took care =
of all the correct passwords, so that is working.
    I then tried the loopback.java with toMSHURL set to the url above, =
but that gives problems in tomcat, which tells me it can't find a =
trusted certificate. Running the same test over the normal http channel =
works fine. Did I miss something here, should I import the certificate =
to yet another store?

    TIA, Gait.

    PS Next test will be digital signatures, hints are welcome..
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Gait Boxman
    Manager Advanced Technology & Standards
    TIE Product Development BV
    Amsterdam, The Netherlands
    Tel: +31 20 658 9091  Fax: +31 20 658 9945
    E-mail: gai...@ti...  WWW: www.TIEglobal.com
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[ebxmlms-general] MSH over SSL with Tomcat

[Gait B. <gai...@ti...>]

Hi,

I'm having some problems getting SSL to work with the MSH.
I've set up tomcat with a certificate using 'keytool -genkey -alias =
tomcat -keyalg RSA'
I entered my server name as the CN, and added some real values for the =
other X.500 fields.
I enabled port 8443 in server.xml, and I managed to hook up to the MSH =
with https://my_server_name:8443/msh, after accepting the certificate in =
IE.
I exported the key, and imported it into /tmp/cacerts. I took care of =
all the correct passwords, so that is working.
I then tried the loopback.java with toMSHURL set to the url above, but =
that gives problems in tomcat, which tells me it can't find a trusted =
certificate. Running the same test over the normal http channel works =
fine. Did I miss something here, should I import the certificate to yet =
another store?

TIA, Gait.

PS Next test will be digital signatures, hints are welcome..
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Gait Boxman
Manager Advanced Technology & Standards
TIE Product Development BV
Amsterdam, The Netherlands
Tel: +31 20 658 9091  Fax: +31 20 658 9945
E-mail: gai...@ti...  WWW: www.TIEglobal.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[ebxmlms-general] Hermes v0.9.1.4 released

[Patrick Y. <kc...@ce...>]

Dear all,

We are pleased to announce a new release of Hermes today. You can =
download the latest release either from our project homepage on =
SourceForge (http://sourceforge.net/projects/ebxmlms), or from =
freebXML.org (http://www.freebxml.org).

Thanks a lot for your support. For your information, here is the release =
note of this release:

Version 0.9.1.4
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
- Supported rebuilding of content type of the Mime message even when =
some mail
  servers mistakenly modified that header for the incoming email =
messages
- Added support of SMTP authentication for sending out messages
- Added SOAP Action header in transport protocol header
- Supported message order semantics
- Bug fixed: now we support persistent storage for error messages as =
well
- Bug fixed: now we can handle loop back messages

Regards,
-Patrick
--
Patrick Yee
System Architect
Center for E-Commerce Infrastructure Development (CECID)
Dept. of Computer Science and Information Systems
The University of Hong Kong
Tel: (852) 22415674
Fax: (852) 25474611

Re: [ebxmlms-general] Check for ebXML message

[Patrick Y. <kc...@ce...>]

Hi,

There are currently 3 ways to check for the arrival of ebxml message:

1. onMessage(). MSH server will call the onMessage() function implemented by
the client application whenever there is an incoming message.

2. URL based. MSH server will post the SOAP message directly to the URL
specified by the client application (also synchronously).

3. File based. MSH server will save the incoming message to a pre-configured
directory. Assuming the client application can access that directory, the
application can poll the directory for incoming messages anytime it likes.

Please refer to our developement guide (downloadable at
http://www.freebxml.org) for more information.

Regards, -Patrick
--
Patrick Yee
System Architect
Center for E-Commerce Infrastructure Development (CECID)
Dept. of Computer Science and Information Systems
The University of Hong Kong
Tel: (852) 22415674
Fax: (852) 25474611


----- Original Message -----
From: "Regis Dubois" <Reg...@va...>
To: "EbXMLms List (E-mail)" <ebx...@li...>
Sent: Monday, October 14, 2002 7:44 PM
Subject: [ebxmlms-general] Check for ebXML message


> Is there another way to check for the arrival of ebxml message than using
> the "onMessage" function.
> i mean to check for incoming messages in an asynchronous way?
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> ebxmlms-general mailing list
> ebx...@li...
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general
>

[ebxmlms-general] Check for ebXML message

[Regis D. <Reg...@va...>]

Is there another way to check for the arrival of ebxml message than using
the "onMessage" function.
i mean to check for incoming messages in an asynchronous way?

Re: [ebxmlms-general] Application Context Registering

[Ng C. Y. [Cyng] <cy...@cs...>]

Hello,

> So far it seems that for an application context to be registered by the MSH
> it as to be launched (registered) once.
> By how to unregister an application context from the msh?

        We have ever noticed that there is no unregistration mechanism so
far. The unregistration involves some data housekeeping work and resource
reallocation with great care. We are now in the process of deriving the
unregistration solution which does not yet appear in the current release.

Regards,
CY

----------------------------------------------------------------------------
Ng Chi Yuen, CY.       cy...@cs...       http://www.cecid.hku.hk/
Technology Officer,
Centre for E-Commerce Infrastructure Development,
The University of Hong Kong
----------------------------------------------------------------------------

[ebxmlms-general] Application Context Registering

[Regis D. <Reg...@va...>]

So far it seems that for an application context to be registered by the MSH
it as to be launched (registered) once.
By how to unregister an application context from the msh?

Re: [ebxmlms-general] Application Context trouble

[Gait B. <gai...@ti...>]

Hi from Europe,

not having seen this one yet, I have been playing with two monitors talking
to eachother (and it worked).
Question is whether the response is ok.
While there has not been a listener set up on that specific port, that
doesn't mean there will be one later that would pick up the file.
AFAIK, once a listener has been registered, and the request object was
subsequently killed, the messages for that listener are kept in the MSH
until the listener is reactivated.
In principle, it shouldn't matter whether a listener is inactive, or not yet
established.
Of course, when the message doesn't survive its TTL, a proper error message
should be returned...

Regards, Gait.

----- Original Message -----
From: "Ng Chi Yuen [Cyng]" <cy...@cs...>
To: "Regis Dubois" <Reg...@va...>
Cc: <ebx...@li...>
Sent: Thursday, October 10, 2002 3:31 PM
Subject: Re: [ebxmlms-general] Application Context trouble


> Hi,
>
> > for instance try to send a message with "<action>" set to
"RequestCatalog"
> > instead of "order" I get the following error message:
> >
> > javax.xml.soap.SOAPException: Bad response: (409HTTP POST submitted to
> > MessageServiceHandler failed: MessageServiceHandlerException:
> > Unknown application context: <CPAId>=CPA_2002,
<ConversationId>=Item_No_128,
> > <Service>=Purchase Order,
> > <Action>=RequestCatalog at
> >
com.sun.xml.messaging.saaj.client.p2p.HttpSOAPConnection.post(HttpSOAPConnec
> > tion.java:267)
> >
> > the msh seems to not recognize the App context. But where can I set up
some
> > nex app contexts, so that it will work for my particular project.
>
>         ApplicationContext is the key to identify the receiver. The above
> exception means that the MSH receiver side does not yet register an
> ApplicationContext with <action>="RequestCatalog".
>
> Regards,
> CY
>
> --------------------------------------------------------------------------
--
> Ng Chi Yuen, CY.       cy...@cs...       http://www.cecid.hku.hk/
> Technology Officer,
> Centre for E-Commerce Infrastructure Development,
> The University of Hong Kong
> --------------------------------------------------------------------------
--
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> ebxmlms-general mailing list
> ebx...@li...
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general

Re: [ebxmlms-general] Application Context trouble

[Ng C. Y. [Cyng] <cy...@cs...>]

Hi,

> for instance try to send a message with "<action>" set to "RequestCatalog"
> instead of "order" I get the following error message:
>
> javax.xml.soap.SOAPException: Bad response: (409HTTP POST submitted to
> MessageServiceHandler failed: MessageServiceHandlerException:
> Unknown application context: <CPAId>=CPA_2002, <ConversationId>=Item_No_128,
> <Service>=Purchase Order,
> <Action>=RequestCatalog at
> com.sun.xml.messaging.saaj.client.p2p.HttpSOAPConnection.post(HttpSOAPConnec
> tion.java:267)
>
> the msh seems to not recognize the App context. But where can I set up some
> nex app contexts, so that it will work for my particular project.

        ApplicationContext is the key to identify the receiver. The above
exception means that the MSH receiver side does not yet register an
ApplicationContext with <action>="RequestCatalog".

Regards,
CY

----------------------------------------------------------------------------
Ng Chi Yuen, CY.       cy...@cs...       http://www.cecid.hku.hk/
Technology Officer,
Centre for E-Commerce Infrastructure Development,
The University of Hong Kong
----------------------------------------------------------------------------

[ebxmlms-general] Application Context trouble

[Regis D. <Reg...@va...>]

The msh is working alright on my system the trouble is, if I try to =
change
the application context,
for instance try to send a message with "<action>" set to =
"RequestCatalog"
instead of "order" I get the following error message:

javax.xml.soap.SOAPException: Bad response: (409HTTP POST submitted to
MessageServiceHandler failed: MessageServiceHandlerException:
Unknown application context: <CPAId>=3DCPA_2002, =
<ConversationId>=3DItem_No_128,
<Service>=3DPurchase Order,
<Action>=3DRequestCatalog at
com.sun.xml.messaging.saaj.client.p2p.HttpSOAPConnection.post(HttpSOAPCo=
nnec
tion.java:267)

the msh seems to not recognize the App context. But where can I set up =
some
nex app contexts, so that it will work for my particular project.

I hope my question ain't to stupid...


R=E9gis Dubois
www.valtech.fr

[ebxmlms-general] Re: MSH errors when loading in Tomcat

[Patrick Y. <kc...@cs...>]

Hi Anthony,

Can you tell me more about where you put your msh.properties.xml file? In
most cases, the exceptions are caused by the fact that the
MessageServiceHandler servlet cannot locate that property file. Normally,
the msh.properties.xml file should be filled with appropriate information,
and placed at one of the following locations:

1. The directory where you launch Tomcat (probably tomcat_home/bin)
2. Classpath (e.g. tomcat_home/webapps/msh/WEB-INF/classes)
3. Home directory of the user who launch Tomcat
4. You may specify a system property "prop.home" to point to the specific
directory holding your msh.properties.xml

Please check this and feel free to email to us for further information.

PS. I am copying this message to ebxmlms-general mailing list, I intended
to build a knowledge base there. :-)

Regards, -patrick


On Tue, 1 Oct 2002 ant...@re... wrote:

> Patrick,
>
> I believe you are the person to ask regarding MSH.
>
> I am deploying MSH within Tomcat 4.04 on a Windows 2000 machine.
> When trying to start tomcat I am given the following error messages (I have
> provided more of the log for full details):
>
>
> 2002-10-01 11:04:47 StandardManager[/msh]: Seeding of random number
> generator has been completed
> 2002-10-01 11:04:49 StandardContext[/msh]: Exception sending context
> initialized event to listener instance of class
> hk.hku.cecid.phoenix.message.handler.MSHServletContextListener
> java.lang.NullPointerException
> 	at
> hk.hku.cecid.phoenix.message.handler.MSHServletContextListener.contextInitia
> lized(Unknown Source)
> 	at
> org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:
> 3188)
> 	at
> org.apache.catalina.core.StandardContext.start(StandardContext.java:3404)
> 	at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:785)
> 	......
>
>
> I was wondering if you had seen this error message before and/or could point
> me in the correct direction to help resolve it.
> I am guessing that it is a simple problem with the way I have
> configured/deployed the application.
> I know that I am not providing much info here, sorry.
>
> Thanks in advance.
>
>
> Anthony Ellis
> Red Wahoo
> -----------------------------
> Tel:  0438 878 003
> www.redwahoo.com
>
>
>
>
>
>

[ebxmlms-general] testing

[Patrick Y. <pat...@ya...>]

testing


---------------------------------
Do You Yahoo!?
HotJobs, a Yahoo! service - Search Thousands of New Jobs