[ebxmlms-general] HostName Verifier

[Tanveer, A. \(NIH/OD\) [C] <tan...@od...>]

Ladislav,

=20

I tried your suggestion to turn off HostName verifier but it still is
throwing an exception. The exception looks like:

   =20

            Info: using property file in
/C:/mshtest/app-config/msh_client.properties.xml

java.io.IOException: HTTPS hostname wrong:  should be <165.112.122.219>

            at sun.net.www.protocol.https.HttpsClient.b(DashoA12275)

            at
sun.net.www.protocol.https.HttpsClient.afterConnect(DashoA12275)

            at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Da
shoA12275)

            at
sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConne
ction.java:569)

=20

=20

Here is what I did based on your suggestion.

=20

1)       I modified the msh_properties.xml to include the
HostnameVerifier tag. My XML file looks like this:

=20

=20
<HostnameVerifier>com.webswell.hermes.NullHostVerifier</HostnameVerifier
>    =20

    =20

    <DigitalSignature>

      <TrustedAnchor>

        <KeyStore>

=20
<Path>C:/Software/Development/j2sdk1.4.2_08/jre/lib/security/</Path>

          <File>nihs2s.ks</File>

          <Password>changeit</Password>

        </KeyStore>

      </TrustedAnchor>

      <AckSign>

        <KeyStore>

=20
<Path>C:/Software/Development/j2sdk1.4.2_08/jre/lib/security/</Path>

          <File>nihs2s.ks</File>

          <Algorithm>RSA</Algorithm>

          <Alias>nihs2s</Alias>

          <Password>changeit</Password>

        </KeyStore>

      </AckSign>

=20

2)       I Copied your verifier.jar file under OC4J's
webapps/msh/WEB-INF/lib. That is where msh.jar and rest of the deployed
msh jar files are.

(We are using OC4J standalone for this particular deployment)

=20

Then I restarted back my OC4J. When deplying/launching msh, I saw the
exception in my OC4J log file.

=20

Any clue?

Thanks

-- Ashique

=20

------------------------------------------------------------------------
------------------------------------------------------------------------
-----------------------

From: "Ladislav Urban" <lad...@we...>
Date: Tue, May 09, 2006 2:45 pm
To: ebxmlms-develop <ebx...@li...>, "Tanveer,
Ashique (NIH/OD) [C]" <tan...@od...>

This code will turn off the verification. You can use code from
verifier.jar that is in an attachment

This is section from msh.properties.xml
You have to have verifier.jar in directory in tomcat with other hermes
classes.

If you have some problems with it let me know

<SSL>

<HostnameVerifier>com.webswell.hermes.NullHostVerifier</HostnameVerifier
>

=20

|-----------------------------------------------------------------------
------------

| Ashique Tanveer

| Booz | Allen | Hamilton

|

| Contractor, eRA Project, National Institute Of Health

| Off:   301-451-1772  | Fax: 925-889-3635

| Email:  tan...@od..., tan...@ba...=20

|-----------------------------------------------------------------------
------------

=20