|
From: Ronald v. K. <rtv...@xs...> - 2005-02-14 16:59:32
|
gt...@dg... probeerde me het volgende duidelijk te maken: > I have to admit I'm green at this point. > I found a property, javax.net.debug, which can enable ssl debugging > (values ssl/all), That was it. > but several places to set this, it seems: > Tomcat initiation / MSH client initiation / MSH client runtime code.. I'd set it as a jvm parameter, that is least intrusive on the code > And will the debug be logged to current output for the task in question? > afaik it goes to stdout, the most low level. > thanks for swift reply, Anytime > Gustav > >>What certificate is to be used to authenticate to the partner? You need to give some more info on >>this part. Second, could you turn on ssl debug on the jvm layer (I do not know the property by >>heart, please look it up yourself) >> >>Ronald >> >>gt...@dg... probeerde me het volgende duidelijk te maken: >> >> >>>Hi, I have installed Hermes 1.0.0.0 in an attempt to fix an issue we have: >>>[our contact requires HTTPS certificate authentication, and we just cant get >>>it working]. I've worked on this for a long time and need help if anyone >>>have it. >>> >>>We have the following certificates/CAs (tbh I'm not sure of the exact >>>difference): >>> >>>tomcat - our CSR + reply from certificate provider >>>root - CA from our certificate provider >>>entrust - CA gotten from partner >>>provider - another CA it seems - keytool includes this as a trustedCertEntry >>>even tho not specified >>> >>>Is the problem misconfiguration of msh.properties.xml? Have tried most >>>possible combinations of this.. We've gotten two CAs from our provider, are >>>we missing a certificate? Have tried pointing towards different aliases, >>>but to no >>>avail. We did not specify an algorithm when importing the CAs. >>> >>>Have had layers of msh.log-errors, but seems we have the "bottom" error >>>(listed below). Not very descriptive.. any ways of tracing this further, any >>>tips hints, anything? :) Would be most appreciative. >>> >>>Thanks, >>>Gustav Tresselt >>> >>> >>> >>>Current Error: >>> >>>2005-02-14 14:03:12,517 INFO [Thread-27]: Sending message to >>>https://<IP blanked>:6707/ebXML >>>2005-02-14 14:03:12,518 DEBUG [Thread-27]: Connection class : class >>>com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl >>>2005-02-14 14:03:12,518 DEBUG [Thread-27]: Instance of >>>HttpsURLConnection : true >>>2005-02-14 14:03:12,518 INFO [Thread-27]: Configuration to a HTTPS >>>connection >>>2005-02-14 14:03:12,518 DEBUG [Thread-27]: use default key manager >>>2005-02-14 14:03:12,562 ERROR [Thread-27]: [10505] Cannot send SOAP message >>>Exception: javax.net.ssl.SSLException >>>Message: java.lang.NullPointerException >>>[..] >>> >>> >>> >>> >>>------------------------------------------------------- >>>SF email is sponsored by - The IT Product Guide >>>Read honest & candid reviews on hundreds of IT Products from real users. >>>Discover which products truly live up to the hype. Start reading now. >>>http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click >>>_______________________________________________ >>>ebxmlms-general mailing list >>>ebx...@li... >>>https://lists.sourceforge.net/lists/listinfo/ebxmlms-general >>> >>> >>> >> >> >> >> > > > > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click > _______________________________________________ > ebxmlms-general mailing list > ebx...@li... > https://lists.sourceforge.net/lists/listinfo/ebxmlms-general > -- Kijk niet terug, maar kijk naar mij Against all odds |