Re: [ebxmlms-general] using HTTPS-> SOAPException: Message send failed

[Gustav T. <gt...@dg...>]

Hi!

You are right in your assessment - I can not use external HTTPS MSHs,
and I get the Soap exception: "Message send failed" if I try.

I'll admit I am (luckily - like so many others), a total certification 
noob. :)
But the current server I'm trying against, does not require client
certification, so I thought Hermes would, like Lynx, "invisibly"
retrieve and store the server certificate with some internal reference.

I have gotten a server certificate file, but as far as I've understood, this
was only necessary for the server which required client certification.

Should I use your path $JAVA_HOME/jre/lib/security/cacerts in
msh.properties' <DigitalSignature> tag? I've referenced /root/.keystore
(keytool's default keystore location), where keytool has stored the tomcat
and root key.

regards,
Gustav Tresselt


Patrick Yee wrote:

> Hello,
>
> Do you mean that you can successfully send loopback message and send 
> message to another MSH using HTTP, but only can send loopback using 
> HTTPS? If so, I will suspect that it's the problem of server 
> certificate management. In my experience, you need to import the 
> server certificate of the HTTPS server to the key store of the JVM of 
> the sending Hermes. The path of the key store is normally at 
> JAVA_HOME/jre/lib/security/cacerts. In addition, the server 
> certificate should have a common name equals to the host name part of 
> the URL of the HTTPS server.
>
> Regards, -Patrick
>
>
>
>
> Gustav Tresselt wrote:
>
>> Thanks for your quick reply Bernd!
>>
>> I have now installed 4.1.31, now one more thing works
>> (loopback via https), but sending to a https MSH still
>> doesn't work, I'm afraid... I get the same message.
>>
>> I still think changing to 4.1.31 was a good idea, as Hermes
>> v0.9.3.1 is no doubt developed around Tomcat 4.x..
>>
>> greetings,
>> Gustav Tresselt
>>
>>>> - TomCat 5.0
>>>> - Hermes v0.9.3.1
>>>>   
>>>
>>>
>>> [...]
>>>  
>>>
>>>> Exception: javax.xml.soap.SOAPException
>>>>   
>>>
>>>
>>>
>>> These three line caught my attention. The other day I also had serious
>>> problems with SoapExceptions and this version combination of a Tomcat 5
>>> and Hermes v0931. Ok, maybe at that time I already had v1000 but I'm 
>>> not
>>> sure.
>>>
>>> The thread where I described my problem was
>>> http://sourceforge.net/mailarchive/forum.php?thread_id=5756256&forum_id=10741. 
>>>
>>> On the one hand I don't know whether it's of much use for you, but 
>>> on the
>>> other hand: who knows? Perhaps the problems have the same source and 
>>> you
>>> get the missing clue you need.
>>>
>>> Btw, I gave up using Tomcat 5 in the end. Time is just too important 
>>> for
>>> me now that I can't risk losing even more of it with so little 
>>> chance of
>>> gaining more insight in the Tomcat5 problem. (As far as it has to do 
>>> with
>>> Tomcat at all...).
>>>
>>> Good luck!
>>>  Bernd Winter
>>>
>>>
>>> -------------------------------------------------------
>>> This SF.Net email is sponsored by: InterSystems CACHE
>>> FREE OODBMS DOWNLOAD - A multidimensional database that combines
>>> robust object and relational technologies, making it a perfect match
>>> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
>>> _______________________________________________
>>> ebxmlms-general mailing list
>>> ebx...@li...
>>> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general
>>>
>>>
>>>
>>>  
>>>
>>
>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by: InterSystems CACHE
>> FREE OODBMS DOWNLOAD - A multidimensional database that combines
>> robust object and relational technologies, making it a perfect match
>> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
>> _______________________________________________
>> ebxmlms-general mailing list
>> ebx...@li...
>> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database that combines
> robust object and relational technologies, making it a perfect match
> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
> _______________________________________________
> ebxmlms-general mailing list
> ebx...@li...
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-general
>
>
>