Rif: [ebxmlms-develop] RE: Hermes & SSL

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hi Venkat,
I imported both server's certificates into the keystore, but I had no=20
luck!!
I'm getting frustrated!
Anyway I really appreciated your reply!
Thank you,
Dunia

ebx...@li... scritti il 04/07/2004 06:34:56 =

AM

> Dunia
> you  need to import each of the other certs into
> keystore as well in addition to cacerts.
>=20
> keytool -import ..........
>=20
>=20
>=20
> -Venkat
>=20
>=20
> --- ebx...@li...
> wrote:
> > Send ebxmlms-develop mailing list submissions to
> >    ebx...@li...
> >=20
> > To subscribe or unsubscribe via the World Wide Web,
> > visit
> >=20
> >
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-develop
> > or, via email, send a message with subject or body
> > 'help' to
> >    ebx...@li...
> >=20
> > You can reach the person managing the list at
> >    ebx...@li...
> >=20
> > When replying, please edit your Subject line so it
> > is more specific
> > than "Re: Contents of ebxmlms-develop digest..."
> >=20
> >=20
> > Today's Topics:
> >=20
> >    1. Hermes & SSL (Dunia Grandoni)
> >    2. RE: Hermes & SSL (Mayne, Peter)
> >=20
> > --=5F=5F--=5F=5F--
> >=20
> > Message: 1
> > To: ebx...@li...
> > From: Dunia Grandoni <DGr...@mi...>
> > Date: Tue, 6 Apr 2004 11:45:01 +0200
> > Subject: [ebxmlms-develop] Hermes & SSL
> > Reply-To: ebx...@li...
> >=20
> > Questo ? un messaggio multiparte in formato MIME.
> > --=3D=5Falternative 003575EAC1256E6E=5F=3D
> > Content-Type: text/plain; charset=3D"US-ASCII"
> >=20
> > Hi all,
> > I am new to Hermes MSH, so I apologise in advance
> > for the questions I'm=20
> > posting.
> > I cannot make my Hermes MSH application work with
> > https.
> > I read the previous post 'about Hermes & SSL' and I
> > tried to make the=20
> > changes mentioned=20
> > there, but I had no success.
> > Here's what I have to manage:
> > There's a Tomcat 4.1.27, SSL enabled, on a Windows
> > 2000 platform (A); an=20
> > application that uses
> > msh is running on it, it is used to send (and
> > receive) invoices to a twin=20
> > application that is running
> > on another server (Tomcat 4.1.27, SSL enabled, on a
> > Linux platform (B)).
> > What I did is creating (with java keytool) a
> > certificate for each server=20
> > and then I imported in <JRE>/lib/security/cacerts
> > of A the certificate of B and viceversa.=20
> > When trying to send an invoice from A to B I get an
> > exception:=20
> >
> hk.hku.cecid.phoenix.message.handler.RequestException:
> >=20
> > sun.security.validator.ValidatorException: No
> > trusted certificate found
> > and no message is sent.
> > Could someone help me configuring msh right?
> > Thank you so much
> > Dunia
> >=20
> >=20
> > --=3D=5Falternative 003575EAC1256E6E=5F=3D
> > Content-Type: text/html; charset=3D"US-ASCII"
> >=20
> >=20
> > <br><font size=3D2 face=3D"sans-serif">Hi all,</font>
> > <br><font size=3D2 face=3D"sans-serif">I am new to
> > Hermes MSH, so I apologise
> > in advance for the questions I'm posting.</font>
> > <br><font size=3D2 face=3D"sans-serif">I cannot make my
> > Hermes MSH application
> > work with https.</font>
> > <br><font size=3D2 face=3D"sans-serif">I read the
> > previous post 'about Hermes
> > &amp; SSL' and I tried to make the changes mentioned
> > </font>
> > <br><font size=3D2 face=3D"sans-serif">there, but I had
> > no success.</font>
> > <br><font size=3D2 face=3D"sans-serif">Here's what I
> > have to manage:</font>
> > <br><font size=3D2 face=3D"sans-serif">There's a Tomcat
> > 4.1.27, SSL enabled,
> > on a Windows 2000 platform (A); an application that
> > uses</font>
> > <br><font size=3D2 face=3D"sans-serif">msh is running on
> > it, it is used to
> > send (and receive) invoices to a twin application
> > that is running</font>
> > <br><font size=3D2 face=3D"sans-serif">on another server
> > (Tomcat 4.1.27, SSL
> > enabled, on a Linux platform (B)).</font>
> > <br><font size=3D2 face=3D"sans-serif">What I did is
> > creating (with java keytool)
> > a certificate for each server and then I imported in
> > &lt;JRE&gt;/lib/security/cacerts</font>
> > <br><font size=3D2 face=3D"sans-serif">of A the
> > certificate of B and viceversa.
> > </font>
> > <br><font size=3D2 face=3D"sans-serif">When trying to
> > send an invoice from
> > A to B I get an exception:
> >
> &nbsp;hk.hku.cecid.phoenix.message.handler.RequestException:
> > sun.security.validator.ValidatorException: No
> > trusted certificate found</font>
> > <br><font size=3D2 face=3D"sans-serif">and no message is
> > sent.</font>
> > <br><font size=3D2 face=3D"sans-serif">Could someone
> > help me configuring msh
> > right?</font>
> > <br><font size=3D2 face=3D"sans-serif">Thank you so
> > much</font>
> > <br><font size=3D2 face=3D"sans-serif">Dunia</font>
> > <br><font size=3D2 face=3D"sans-serif"><br>
> > </font>
> > --=3D=5Falternative 003575EAC1256E6E=5F=3D--
> >=20
> >=20
> > --=5F=5F--=5F=5F--
> >=20
> > Message: 2
> > From: "Mayne, Peter" <Pet...@ap...>
> > To: <ebx...@li...>
> > Subject: RE: [ebxmlms-develop] Hermes & SSL
> > Date: Wed, 7 Apr 2004 10:00:32 +1000=20
> > Reply-To: ebx...@li...
> >=20
> > This is a multi-part message in MIME format.
> >=20
> > ------=3D=5FNextPart=5F000=5F159B1=5F01C41C87.4ED12AB0
> > Content-Type: multipart/alternative;
> >    boundary=3D"----=5F=3D=5FNextPart=5F001=5F01C41C33.58A58990"
> >=20
> >=20
> > ------=5F=3D=5FNextPart=5F001=5F01C41C33.58A58990
> > Content-Transfer-Encoding: quoted-printable
> > Content-Type: text/plain;
> >    charset=3D"iso-8859-1"
> >=20
> > (Disclaimer: I don't actually do this, because for
> > one reason or =3D
> > another, I
> > comment out most of the Http class used in Hermes,
> > including the =3D
> > keystore
> > stuff.)
> > =3D20
> > I believe Hermes uses its own trust store. Look in
> > msh.properties.xml at
> > //Property/MSH/SSL and use your own keystore, rather
> > than modifying the =3D
> > one
> > in JAVA=5FHOME/lib/security.
> > =3D20
> > PJDM
> > --
> > Peter Mayne
> > Technology Consultant
> > Spherion Technology Solutions
> > Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602
> > T: 61 2 62689727  F: 61 2 62689777=3D20
> >=20
> > -----Original Message-----
> > From: Dunia Grandoni
> > [mailto:DGr...@mi...]=3D20
> > Sent: Tuesday, 6 April 2004 7:45 PM
> > To: ebx...@li...
> > Subject: [ebxmlms-develop] Hermes & SSL
> >=20
> >=20
> >=20
> > Hi all,=3D20
> > I am new to Hermes MSH, so I apologise in advance
> > for the questions I'm
> > posting.=3D20
> > I cannot make my Hermes MSH application work with
> > https.=3D20
> > I read the previous post 'about Hermes & SSL' and I
> > tried to make the
> > changes mentioned=3D20
> > there, but I had no success.=3D20
> > Here's what I have to manage:=3D20
> > There's a Tomcat 4.1.27, SSL enabled, on a Windows
> > 2000 platform (A); an
> > application that uses=3D20
> > msh is running on it, it is used to send (and
> > receive) invoices to a =3D
> > twin
> > application that is running=3D20
> > on another server (Tomcat 4.1.27, SSL enabled, on a
> > Linux platform (B)). =3D
> >=20
> > What I did is creating (with java keytool) a
> > certificate for each server =3D
> > and
> > then I imported in <JRE>/lib/security/cacerts=3D20
> > of A the certificate of B and viceversa.=3D20
> > When trying to send an invoice from A to B I get an
> > exception:
> >
> hk.hku.cecid.phoenix.message.handler.RequestException:
> > sun.security.validator.ValidatorException: No
> > trusted certificate found=3D20
> > and no message is sent.=3D20
> > Could someone help me configuring msh right?=3D20
> > Thank you so much=3D20
> > Dunia=3D20
> >=20
> >=20
> >=20
> >=20
> >=20
> > The information contained in this email and any
> > attachments to it:
> >=20
> > (a) may be confidential and if you are not the
> > intended recipient, any =3D
> > interference with,=3D20
> > use, disclosure or copying of this material is
> > unauthorised and =3D
> > prohibited; and
> >=20
> > (b) may contain personal information of the
> > recipient and/or the sender =3D
> > as defined=3D20
> > under the Privacy Act 1988 (Cth). Consent is hereby
> > given by the =3D
> > recipient(s) to=3D20
> > collect, hold and use such information and any
> > personal information =3D
> > contained in a=3D20
> > response to this email, for any reasonable purpose
> > in the ordinary =3D
> > course of=3D20
> > Spherion's=3D20
> > business, including forwarding this email internally
> > or disclosing it to =3D
> > a third party. All=3D20
> > personal information collected by Spherion will be
> > handled in accordance =3D
> > with=3D20
> > Spherion's Privacy Policy. If you have received this
> > email in error, =3D
> > please notify the=3D20
> > sender and delete it.
> >=20
> > (c) you agree not to employ or arrange employment
> > for any candidate(s) =3D
> > supplied in=3D20
> > this email and any attachments without first
> > entering into a contractual =3D
> > agreement with=3D20
> > Spherion. You further agree not to divulge any
> > information contained in =3D
> > this document=3D20
> > to any person(s) or entities without the express
> > permission of Spherion.
> >=20
> >=20
> >=20
> > ------=5F=3D=5FNextPart=5F001=5F01C41C33.58A58990
> > Content-Transfer-Encoding: quoted-printable
> > Content-Type: text/html;
> >    charset=3D"iso-8859-1"
> >=20
> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0
> > Transitional//EN">
> > <HTML><HEAD>
> > <META HTTP-EQUIV=3D3D"Content-Type"
> > CONTENT=3D3D"text/html; =3D
> > charset=3D3DUS-ASCII">
> > <TITLE>Message</TITLE>
> >=20
> > <META content=3D3D"MSHTML 6.00.2800.1264"
> > name=3D3DGENERATOR></HEAD>
> > <BODY>
> > <DIV><SPAN class=3D3D448475623-06042004><FONT
> > face=3D3DArial =3D
> > size=3D3D2>(Disclaimer: I don't=3D20
> > actually do this, because for one reason or another,
> > I comment out most =3D
> > of the=3D20
> > Http class used in Hermes, including the keystore =3D
> > stuff.)</FONT></SPAN></DIV>
> > <DIV><SPAN class=3D3D448475623-06042004><FONT
> > face=3D3DArial=3D20
> > size=3D3D2></FONT></SPAN>&nbsp;</DIV>
> > <DIV><SPAN class=3D3D448475623-06042004><FONT
> > face=3D3DArial size=3D3D2>I =3D
> > believe Hermes=3D20
> > uses its own trust store. Look in msh.properties.xml
> > at =3D
> > //Property/MSH/SSL and=3D20
> > use your own keystore, rather than modifying the one
> > in=3D20
> > JAVA=5FHOME/lib/security.</FONT></SPAN></DIV>
> > <DIV><FONT face=3D3DArial size=3D3D2></FONT>&nbsp;</DIV>
> > <DIV><SPAN class=3D3D448475623-06042004><FONT
> > face=3D3DArial=3D20
> > size=3D3D2>PJDM<BR></FONT></SPAN><FONT
> > size=3D3D2>--<BR>Peter =3D
> > Mayne<BR>Technology=3D20
> > Consultant<BR>Spherion Technology Solutions<BR>Level
> > 1, 243 Northbourne =3D
> > Avenue,=3D20
> > Lyneham, ACT, 2602<BR>T: 61 2 62689727&nbsp; F: 61 2
> > 62689777</FONT> =3D
> > </DIV>
> > <BLOCKQUOTE=3D20
> > style=3D3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px;
> > BORDER-LEFT: #000000 2px =3D
> > solid; MARGIN-RIGHT: 0px">
> >   <DIV></DIV>
> >   <DIV class=3D3DOutlookMessageHeader lang=3D3Den-us
> > dir=3D3Dltr =3D
> > align=3D3Dleft><FONT=3D20
> >   face=3D3DTahoma size=3D3D2>-----Original
> > Message-----<BR><B>From:</B> =3D
> > Dunia Grandoni=3D20
> >   [mailto:DGr...@mi...] <BR><B>Sent:</B>
> > Tuesday, 6 April 2004 =3D
> > 7:45=3D20
> >   PM<BR><B>To:</B> =3D
> >
> ebx...@li...<BR><B>Subject:</B>=3D20
> >   [ebxmlms-develop] Hermes &amp;
> > SSL<BR><BR></FONT></DIV><BR><FONT=3D20
> >   face=3D3Dsans-serif size=3D3D2>Hi all,</FONT>
> > <BR><FONT face=3D3Dsans-serif =3D
> > size=3D3D2>I am=3D20
> >   new to Hermes MSH, so I apologise in advance for
> > the questions I'm=3D20
> >   posting.</FONT> <BR><FONT face=3D3Dsans-serif
> > size=3D3D2>I cannot make my =3D
> > Hermes MSH=3D20
> >   application work with https.</FONT> <BR><FONT
> > face=3D3Dsans-serif =3D
> > size=3D3D2>I read=3D20
> >   the previous post 'about Hermes &amp; SSL' and I
> > tried to make the =3D
> > changes=3D20
> >   mentioned </FONT><BR><FONT face=3D3Dsans-serif
> > size=3D3D2>there, but I had =3D
> > no=3D20
> >   success.</FONT> <BR><FONT face=3D3Dsans-serif
> > size=3D3D2>Here's what I =3D
> > have to=3D20
> >   manage:</FONT> <BR><FONT face=3D3Dsans-serif
> > size=3D3D2>There's a Tomcat =3D
> > 4.1.27, SSL=3D20
> >   enabled, on a Windows 2000 platform (A); an
> > application that =3D
> > uses</FONT>=3D20
> >   <BR><FONT face=3D3Dsans-serif size=3D3D2>msh is
> > running on it, it is used =3D
> > to send (and=3D20
> >   receive) invoices to a twin application that is
> > running</FONT> =3D
> > <BR><FONT=3D20
> >   face=3D3Dsans-serif size=3D3D2>on another server
> > (Tomcat 4.1.27, SSL =3D
> > enabled, on a=3D20
> >   Linux platform (B)).</FONT> <BR><FONT
> > face=3D3Dsans-serif size=3D3D2>What =3D
> > I did is=3D20
> >   creating (with java keytool) a certificate for
> > each server and then I =3D
> > imported=3D20
> >   in &lt;JRE&gt;/lib/security/cacerts</FONT>
> > <BR><FONT face=3D3Dsans-serif =3D
> > size=3D3D2>of=3D20
> >   A the certificate of B and viceversa.
> > </FONT><BR><FONT =3D
> > face=3D3Dsans-serif=3D20
> >   size=3D3D2>When trying to send an invoice from A to
> > B I get an =3D
> > exception:=3D20
> >=20
> >
> &nbsp;hk.hku.cecid.phoenix.message.handler.RequestException:=3D20
> >   sun.security.validator.ValidatorException: No
> > trusted certificate =3D
> > found</FONT>=3D20
> >   <BR><FONT face=3D3Dsans-serif size=3D3D2>and no
> > message is sent.</FONT> =3D
> > <BR><FONT=3D20
> >   face=3D3Dsans-serif size=3D3D2>Could someone help me
> > configuring msh =3D
> > right?</FONT>=3D20
> >   <BR><FONT face=3D3Dsans-serif size=3D3D2>Thank you so
> > much</FONT> =3D
> > <BR><FONT=3D20
> >   face=3D3Dsans-serif size=3D3D2>Dunia</FONT> <BR><FONT
> > face=3D3Dsans-serif=3D20
> >
> size=3D3D2><BR></BLOCKQUOTE></FONT></BODY><!--[object=5Fid=3D3D#ap.
> spherion.com=3D
> #]--><P align=3D3Dleft><FONT face=3D3DTahoma
> > size=3D3D2></FONT>&nbsp;<FONT =3D
> > size=3D3D1>The information contained in this email and
> > any attachments to =3D
> > it:</FONT></P>
> > <P align=3D3Dleft><FONT size=3D3D1>(a) may be
> > confidential and if you are =3D
> > not the intended recipient, any interference with,
> > <BR>use, disclosure =3D
> > or copying of this material is unauthorised and
> > prohibited; =3D
> > and</FONT></P>
> > <P align=3D3Dleft><FONT size=3D3D1>(b) may contain
> > personal information of =3D
> > the recipient and/or the sender as defined <BR>under
> > the Privacy Act =3D
> > 1988 (Cth). Consent is hereby given by the
> > recipient(s) to <BR>collect, =3D
> > hold and use such information and any personal
> > information contained in =3D
> > a <BR>response to this email, for any reasonable
> > purpose in the ordinary =3D
> > course of <BR>Spherion's <BR>business, including
> > forwarding this email =3D
> > internally or disclosing it to a third party. All
> > <BR>personal =3D
> > information collected by Spherion will be handled in
> > accordance with =3D
> > <BR>Spherion's Privacy Policy. If you have received
> > this email in error, =3D
> > please notify the <BR>sender and delete
> > it.</FONT></P>
> > <P align=3D3Dleft><FONT size=3D3D1>(c) you agree not to
> > employ or arrange =3D
> > employment for any candidate(s) supplied in <BR>this
> > email and any =3D
> > attachments without first entering into a
> > contractual agreement with =3D
> > <BR>Spherion. You further agree not to divulge any
> > information contained =3D
> > in this document <BR>to any person(s) or entities
> > without the express =3D
> > permission of Spherion.<BR></FONT></P>
> > <P align=3D3Dleft><FONT face=3D3DTahoma size=3D3D2><FONT =3D
> > color=3D3D#0000ff><BR>&nbsp;</P></FONT></FONT></HTML>
> >=20
> > ------=5F=3D=5FNextPart=5F001=5F01C41C33.58A58990--
> >=20
> > ------=3D=5FNextPart=5F000=5F159B1=5F01C41C87.4ED12AB0--
> >=20
> >=20
> >=20
> > --=5F=5F--=5F=5F--
> >=20
> > =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
> > ebxmlms-develop mailing list
> > ebx...@li...
> >
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-develop
> >=20
> >=20
> > End of ebxmlms-develop Digest
>=20
>=20
> =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
> Do you Yahoo!?
> Yahoo! Small Business $15K Web Design Giveaway=20
> http://promotions.yahoo.com/design=5Fgiveaway/
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad=5Fid=3D1470&alloc=5Fid=3D3638&op=
=3Dclick
> =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
> ebxmlms-develop mailing list
> ebx...@li...
> https://lists.sourceforge.net/lists/listinfo/ebxmlms-develop