From: Marcos F. <mar...@ho...> - 2013-01-17 17:24:17
|
I've done like you said, but the problem persists. If I run the EJBCA application server first, the EJBCA works well and SignServer bugs, but if I run SignServer first, SignServer works well, EJBCA bugs. There are some resources that the first application server is getting before the other. -----Mensagem original----- De: Markus Kilås [mailto:ma...@pr...] Enviada em: quinta-feira, 17 de janeiro de 2013 12:04 Para: Marcos Fontana Cc: signserver-develop Assunto: Re: [SignServer-develop] RES: RES: RES: RES: Worker's questions and Error WSDL On 2013-01-17 15:01, Markus Kilås wrote: > On 2013-01-16 12:09, Marcos Fontana wrote: >> Yes, i edited the jndi.properties.jboss like you told me: >> >> # JBoss properites >> java.naming.factory.initial=org.jnp.interfaces.NamingContextFactory >> java.naming.provider.url=127.0.0.1:11099 >> java.naming.factory.url.pkgs=org.jboss.naming > > It looks correct, assuming you configured the SignServer JBoss to use > port 11099 for JNDI lookups. > Also notice that some lookups are performed internally in SignServer so you might have to run an "ant clean deploy" after changing this properties so SignServer will be re-deployed in JBoss. // Markus >> >> EJBCA and SignServer has the same hostname that I see no problem. >> >> What I'm trying to archive is, I need the 2 services running at the >> same time, peoples will create their own certificates and then will >> sign/verify some documents. But this is a academic project, is not >> needed different machines to host each service. >> >> ========== >> >> When I you will deploy SignServer, before, I must to copy tomcat.jks >> to p12 folder in signserver folder from p12 folder of ejbca. I just >> want it to read directly by EJBCA folder. I think I'm >> misunderstanding, but I'm trying to use ejbca tomcat.jks that is in another application server. > > The web server keystore is often not changed that frequently, say once > every one or two years, so normally manually copying should be okey. > If you still want to automate this, why not just create a symlink in > p12 pointing to tomcat.jks in the EJBCA folder. An other alternative > could be to set the property "httpsserver.keystore" to the path to the > tomcat.jks in the ejbca folder. > > > Best regards, > Markus > >> >> -----Mensagem original----- >> De: Markus Kilås [mailto:ma...@pr...] Enviada em: >> quarta-feira, 16 de janeiro de 2013 07:23 >> Para: Marcos Fontana >> Cc: signserver-develop >> Assunto: Re: [SignServer-develop] RES: RES: RES: Worker's questions >> and Error WSDL >> >> On 2013-01-15 18:05, Marcos Fontana wrote: >>> Markus, there is some way to change the naming identifier in the >>> signserver installation to avoid this error? If no, there is another >>> way >> to do it? >> >> Can you describe more what you are trying to achieve? >> >> >From the stacktrace below it looks like either you are using the >> >SignServer >> CLI but connecting to EJBCA or that you use EJBCA and connecting to >> SignServer. >> >> If you are running multiple JBoss instances on different hosts and/or >> ports, are you sure you have changed jndi.properties.jboss and run >> "ant deploy" so jndi.properties contains the right hostname and JNDI >> port for the JBoss running SignServer? >> >> >> Best regards, >> Markus >> >> >>> >>> Regards, >>> >>> javax.naming.NamingException: Could not dereference object [Root >>> exception is java.lang.reflect.UndeclaredThrowableException] >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1504) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> org.ejbca.core.model.util.EjbRemoteHelper.getCertficateRequestSessio >>> n( >>> EjbRem >>> oteHelper.java:255) >>> at >>> certificate.model.ModelCertificado.<init>(ModelCertificado.java:36) >>> at certificate.principal.Principal.main(Principal.java:29) >>> Caused by: java.lang.reflect.UndeclaredThrowableException >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> ... 7 more >>> Caused by: org.jboss.aop.NotFoundInDispatcherException: Object with oid: >>> ProxyFactory/ejbca/CertificateRequestSessionBean/ejbca/CertificateRe >>> qu estSes sionRemote was not found in the Dispatcher >>> at org.jboss.aop.Dispatcher.invoke(Dispatcher.java:85) >>> at >>> org.jboss.aspects.remoting.AOPRemotingInvocationHandler.invoke(AOPRe >>> mo >>> tingIn >>> vocationHandler.java:82) >>> at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:891) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.completeInvocation( >>> Se >>> rverTh >>> read.java:744) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.processInvocation(S >>> er >>> verThr >>> ead.java:697) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread. >>> ja >>> va:524 >>> ) >>> at >>> >> org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.jav >> a:232) >>> at >>> >> org.jboss.remoting.MicroRemoteClientInvoker.invoke(MicroRemoteClientInvoker. >>> java:211) >>> at org.jboss.remoting.Client.invoke(Client.java:1724) >>> at org.jboss.remoting.Client.invoke(Client.java:629) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:60) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> org.ejbca.core.model.util.EjbRemoteHelper.getCertficateRequestSessio >>> n( >>> EjbRem >>> oteHelper.java:255) >>> at >>> certificate.model.ModelCertificado.<init>(ModelCertificado.java:36) >>> at certificate.principal.Principal.main(Principal.java:29) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> ... 14 more >>> >>> javax.naming.NamingException: Could not dereference object [Root >>> exception is java.lang.reflect.UndeclaredThrowableException] >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1504) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> >> org.ejbca.core.model.util.EjbRemoteHelper.getCaSession(EjbRemoteHelper.java: >>> 101) >>> at >>> org.ejbca.util.InterfaceCache.getCaSession(InterfaceCache.java:76) >>> at >>> certificate.model.ModelCertificado.<init>(ModelCertificado.java:37) >>> at certificate.principal.Principal.main(Principal.java:29) >>> Caused by: java.lang.reflect.UndeclaredThrowableException >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> ... 8 more >>> Caused by: org.jboss.aop.NotFoundInDispatcherException: Object with oid: >>> ProxyFactory/ejbca/CaSessionBean/ejbca/CaSessionRemote was not found >>> in the Dispatcher >>> at org.jboss.aop.Dispatcher.invoke(Dispatcher.java:85) >>> at >>> org.jboss.aspects.remoting.AOPRemotingInvocationHandler.invoke(AOPRe >>> mo >>> tingIn >>> vocationHandler.java:82) >>> at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:891) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.completeInvocation( >>> Se >>> rverTh >>> read.java:744) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.processInvocation(S >>> er >>> verThr >>> ead.java:697) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread. >>> ja >>> va:524 >>> ) >>> at >>> >> org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.jav >> a:232) >>> at >>> >> org.jboss.remoting.MicroRemoteClientInvoker.invoke(MicroRemoteClientInvoker. >>> java:211) >>> at org.jboss.remoting.Client.invoke(Client.java:1724) >>> at org.jboss.remoting.Client.invoke(Client.java:629) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:60) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> >> org.ejbca.core.model.util.EjbRemoteHelper.getCaSession(EjbRemoteHelper.java: >>> 101) >>> at >>> org.ejbca.util.InterfaceCache.getCaSession(InterfaceCache.java:76) >>> at >>> certificate.model.ModelCertificado.<init>(ModelCertificado.java:37) >>> at certificate.principal.Principal.main(Principal.java:29) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> ... 15 more >>> >>> javax.naming.NamingException: Could not dereference object [Root >>> exception is java.lang.reflect.UndeclaredThrowableException] >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1504) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> org.ejbca.core.model.util.EjbRemoteHelper.getCertStoreSession(EjbRem >>> ot >>> eHelpe >>> r.java:157) >>> at >>> org.ejbca.util.InterfaceCache.getCertificateStoreSession(InterfaceCa >>> ch >>> e.java >>> :92) >>> at >>> >> certificate.model.ModelCertificado.emitirCertificado2(ModelCertificado.java: >>> 80) >>> at certificate.principal.Principal.main(Principal.java:31) >>> Caused by: java.lang.reflect.UndeclaredThrowableException >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> ... 8 more >>> Caused by: org.jboss.aop.NotFoundInDispatcherException: Object with oid: >>> ProxyFactory/ejbca/CertificateStoreSessionBean/ejbca/CertificateStor >>> eS ession Remote was not found in the Dispatcher >>> at org.jboss.aop.Dispatcher.invoke(Dispatcher.java:85) >>> at >>> org.jboss.aspects.remoting.AOPRemotingInvocationHandler.invoke(AOPRe >>> mo >>> tingIn >>> vocationHandler.java:82) >>> at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:891) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.completeInvocation( >>> Se >>> rverTh >>> read.java:744) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.processInvocation(S >>> er >>> verThr >>> ead.java:697) >>> at >>> org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread. >>> ja >>> va:524 >>> ) >>> at >>> >> org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.jav >> a:232) >>> at >>> >> org.jboss.remoting.MicroRemoteClientInvoker.invoke(MicroRemoteClientInvoker. >>> java:211) >>> at org.jboss.remoting.Client.invoke(Client.java:1724) >>> at org.jboss.remoting.Client.invoke(Client.java:629) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:60) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> at $Proxy0.createProxyBusiness(Unknown Source) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.SessionProxyObjectFa >>> ct >>> ory.cr >>> eateProxy(SessionProxyObjectFactory.java:129) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.session.stateless.StatelessS >>> es >>> sionPr >>> oxyObjectFactory.getProxy(StatelessSessionProxyObjectFactory.java:79) >>> at >>> org.jboss.ejb3.proxy.impl.objectfactory.ProxyObjectFactory.getObject >>> In >>> stance >>> (ProxyObjectFactory.java:158) >>> at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstance(NamingContext.java >> :1479) >>> at >>> >> org.jnp.interfaces.NamingContext.getObjectInstanceWrapFailure(NamingContext. >>> java:1496) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:822) >>> at org.jnp.interfaces.NamingContext.lookup(NamingContext.java:686) >>> at javax.naming.InitialContext.lookup(Unknown Source) >>> at >>> org.ejbca.core.ejb.JndiHelper.getRemoteSession(JndiHelper.java:57) >>> at >>> org.ejbca.core.model.util.EjbRemoteHelper.getCertStoreSession(EjbRem >>> ot >>> eHelpe >>> r.java:157) >>> at >>> org.ejbca.util.InterfaceCache.getCertificateStoreSession(InterfaceCa >>> ch >>> e.java >>> :92) >>> at >>> >> certificate.model.ModelCertificado.emitirCertificado2(ModelCertificado.java: >>> 80) >>> at certificate.principal.Principal.main(Principal.java:31) >>> at >>> org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemo >>> te >>> Interc >>> eptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at >>> org.jboss.ejb3.proxy.impl.remoting.IsLocalProxyFactoryInterceptor.in >>> vo >>> ke(IsL >>> ocalProxyFactoryInterceptor.java:72) >>> at >>> org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation >>> .j >>> ava:10 >>> 2) >>> at org.jboss.aspects.remoting.PojiProxy.invoke(PojiProxy.java:62) >>> ... 15 more >>> -----Mensagem original----- >>> De: Markus Kilås [mailto:ma...@pr...] Enviada em: >>> segunda-feira, 14 de janeiro de 2013 19:23 >>> Para: Marcos Fontana >>> Cc: signserver-develop >>> Assunto: Re: [SignServer-develop] RES: RES: Worker's questions and >>> Error WSDL >>> >>> On 2013-01-14 20:13, Marcos Fontana wrote: >>>> Hi Markus, >>>> >>>> By the reference of Tomas, I create a second instance of JBOSS, one >>>> to Ejbca and another to SignServer. I configured the second >>>> instance following some guides and all the installation of EJBCA >>>> and SignServer was >>> fine. >>>> >>>> I put the default ports to work with 1 before the normal ports, >>>> like >>>> 8080 = 18080. >>>> >>>> When I try to call bin/signserver.sh setproperties >>>> doc/sample-configs/qs_pdfsigner_configuration.properties, the >>>> signserver insist to call the 127.0.0.1:1099, thowing a Error: >>>> org.signserver.common.ServiceLocator - Error Looking up signserver >>>> interface. >>>> >>>> I'm sure that I change the ports well. Where am I wrong? >>> >>> You need to edit bin/jndi.properties.jboss and set the right port in >>> java.naming.provider.url and then run "ant". After that >>> bin/jndi.properties should contain the right port. >>> >>> >>> Best regards, >>> Markus >>> >>>> >>>> Regards >>>> >>>> -----Mensagem original----- >>>> De: Markus Kilås [mailto:ma...@pr...] Enviada em: >>>> quinta-feira, >>>> 10 de janeiro de 2013 07:08 >>>> Para: sig...@li... >>>> Assunto: Re: [SignServer-develop] RES: Worker's questions and Error >>>> WSDL >>>> >>>> Marcos, >>>> >>>> What you could try is to first make sure you can access the WSDL >>>> file using the same URL in an web browser. >>>> >>>> If you get an certificate warning, it did not work and you would >>>> have to import your CA certificate to the browser. When you have >>>> got that to work you should make sure your trust store contains >>>> that CA >>> certificate. >>>> >>>> >>>> Best regards, >>>> Markus >>>> >>>> On 2013-01-09 21:02, Marcos Fontana wrote: >>>>> >>>>> ------------------------------------------------------------------ >>>>> -- >>>>> - >>>>> - >>>>> -- >>>>> From: Marcos Fontana >>>>> Sent: 09/01/2013 17:10 >>>>> To: 'Markus Kilås' >>>>> Subject: RES: [SignServer-develop] Worker's questions and Error >>>>> WSDL >>>>> >>>>> Hi Markus, >>>>> >>>>> Have you already got this: HTTP transport error: >>>>> javax.net.ssl.SSLHandshakeException: Received fatal alert: >>>> bad_certificate? >>>>> >>>>> I tested with tomcat.jks and truststore.jks. Both contain the >>>>> right certificates that is used to use SSL validation and nothing works. >>>>> =( >>>>> >>>>> com.sun.xml.internal.ws.client.ClientTransportException: HTTP >>>>> transport >>>>> error: javax.net.ssl.SSLHandshakeException: Received fatal alert: >>>>> bad_certificate >>>>> at >>>>> com.sun.xml.internal.ws.transport.http.client.HttpClientTransport. >>>>> ge >>>>> t >>>>> O >>>>> utput( >>>>> Unknown Source) >>>>> at >>>>> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.pr >>>>> oc >>>>> e >>>>> s >>>>> s(Unkn >>>>> own Source) >>>>> at >>>>> com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.pr >>>>> oc >>>>> e >>>>> s >>>>> sReque >>>>> st(Unknown Source) >>>>> at >>>>> com.sun.xml.internal.ws.transport.DeferredTransportPipe.processReq >>>>> ue >>>>> s >>>>> t >>>>> (Unkno >>>>> wn Source) >>>>> at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Unknown >> Source) >>>>> at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Unknown Source) >>>>> at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Unknown Source) >>>>> at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Unknown >> Source) >>>>> at com.sun.xml.internal.ws.client.Stub.process(Unknown Source) >>>>> at >>>>> com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(Unknown >>>>> Source) >>>>> at >>>>> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknow >>>>> n >>>> Source) >>>>> at >>>>> com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknow >>>>> n >>>> Source) >>>>> at >>>>> com.sun.xml.internal.ws.client.sei.SEIStub.invoke(Unknown >>>> Source) >>>>> at $Proxy30.process(Unknown Source) >>>>> at >>>>> org.signserver.client.api.SigningAndValidationWS.process(SigningAn >>>>> dV >>>>> a >>>>> l >>>>> idatio >>>>> nWS.java:176) >>>>> at >>>>> org.signserver.client.api.SigningAndValidationWS.process(SigningAn >>>>> dV >>>>> a >>>>> l >>>>> idatio >>>>> nWS.java:144) >>>>> at >>>>> org.signserver.client.api.SigningAndValidationWS.sign(SigningAndVa >>>>> li >>>>> d >>>>> a >>>>> tionWS >>>>> .java:208) >>>>> at >>>>> >>>> certificate.model.ModelDocumento.assinarDocumento4(ModelDocumento.j >>>> av >>>> a >>>> :141) >>>>> at certificate.principal.Principal.main(Principal.java:70) >>>>> >>>>> -----Mensagem original----- >>>>> De: Markus Kilås [mailto:ma...@pr...] Enviada em: >>>>> quarta-feira, >>>>> 9 de janeiro de 2013 05:12 >>>>> Para: sig...@li... >>>>> Assunto: Re: [SignServer-develop] Worker's questions and Error >>>>> WSDL >>>>> >>>>> On 2013-01-08 18:59, Marcos Fontana wrote: >>>>>> Hi Markus, >>>>>> >>>>>> First, thanks for the support. >>>>>> >>>>>> I still getting the WSDL problem. >>>>>> >>>>>> A question: the trustStore must contain which certificate? the >>>>>> server certificate or the certificate of who will signin the document? >>>>> >>>>> The certificate of the issuer of the server certificate. That is >>>>> the CA that signed the server certificate. >>>>> >>>>> The purpose of the trust store is to list all CA certificates your >>>>> client application will trust when verifying the server >>>>> certificate sent by the server when the connection is established. >>>>> >>>>>> >>>>>> System.setProperty("javax.net.ssl.trustStore", >>>>>> "C:/Users/Marcos/Desktop/p12/mFontana.p12"); >>>>>> System.setProperty("javax.net.ssl.trustStorePassword", "myPass"); >>>>>> >>>>>> Another question: If i create a service that will sign/validate >>>>>> documents of diferente peoples, which one with their own >>>>>> certificate, must i create a worker for which one of them? Or can >>>>>> I do it by that example Signing and Validating an XML document. >>>>>> For this comands, in the case of a PDF, there is some way to do >>>>>> it like in the web demos page, including the logo and that other >>>>>> informations or just having the worker configured wll that is included? >>>>> >>>>> Each worker signs with one key-pair and uses one certificate so if >>>>> you want to use different key-pairs/certificates for different >>>>> people then you would need to have different workers for them. >>>>> >>>>> The "Signing and Validating an XML document" example in the >>>>> integration chapter of the manual shows how an client application >>>>> can request an XML document to be signed and then validated. >>>>> >>>>> Similarly to the code for signing an XML document you can also do >>>>> this for PDF documents. Just let the byte array 'unsigned' be the >>>>> content of the PDF document and replace DemoXMLSigner with the >>>>> name of your PDFSigner. If you configure the PDFSigner to use a >>>>> logo that will also be included just if you called it from the demo web page. >>>>> >>>>> Validation is currently not supported for PDF documents though. >>>>> >>>>> Best regards, >>>>> Markus >>>>> >>>>> >>>>>> >>>>>> Regards >>>>>> ----------------------------------------------------------------- >>>>>> -- >>>>>> - >>>>>> - >>>>>> - >>>>>> -- >>>>>> From: Markus Kilås >>>>>> Sent: 06/01/2013 11:27 >>>>>> To: sig...@li... >>>>>> Subject: Re: [SignServer-develop] Worker's questions and Error >>>>>> WSDL >>>>>> >>>>>> On 2013-01-04 17:55, Marcos Fontana wrote: >>>>>>> Hi, >>>>>>> >>>>>> >>>>>> Hi Marcos, >>>>>> >>>>>>> >>>>>>> >>>>>>> When Im are setting properties by the command: >>>>>>> >>>>>>> >>>>>>> >>>>>>> bin/signserver.sh setproperties >>>>>>> doc/sample-configs/qs_pdfsigner_configuration.properties >>>>>>> >>>>>>> >>>>>>> >>>>>>> I got the console error: Error reading property file. Is there >>>>>>> some place that I can see this log? >>>>>>> >>>>>> >>>>>> You can get this error is the file is not existing or in any >>>>>> other way not readable. Make sure that the file can be read by >>>>>> for instance running "less >>> doc/sample-configs/qs_pdfsigner_configuration.properties". >>>>>> Unfortunately this is not logged anywhere in more detail than >>>>>> what is printed on the console. >>>>>> >>>>>>> >>>>>>> >>>>>>> The configurations are right. Another question, what is the >>>>>>> difference by worker and signer? >>>>>> >>>>>> A Worker is an entity in SignServer which has an Worker ID and a >>>>>> configuration and can be called to perform some work. A signer is >>>>>> a type of worker which uses a crypto token to sign something. >>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> The ID or Worker name, in the case of PDF, is the PDFSigner, >>>>>>> configured in this line: WORKERGENID1.NAME=PDFSigner? >>>>>> >>>>>> That property sets the worker name to "PDFSigner" for the new >>>>>> worker which is about to be added. The WORKERGENID1 means that a >>>>>> new worker with the next available ID will be created. >>>>>> >>>>>> If you instead want to define the worker ID you could replace >>>>>> WORKERGENID1 with for instance WORKER47 (or any other ID). This >>>>>> is recommended if you want to be able to apply (setproperties) >>>>>> the file again without having a new worker to be created. >>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> And another question, Im getting this error when i try to >>>>>>> instantiate the object os WSDL in this line >>>>>>> >>>>>>> : ISigningAndValidation _signserver_ = >>>>>>> *new*SigningAndValidationWS("localhost", 8442, *true*); >>>>>>> >>>>>>> >>>>>>> >>>>>>> _javax.xml.ws.WebServiceException_: Failed to access the WSDL at: >>>>>>> https://localhost:8442/signserver/signserverws/signserverws?wsdl. >>>>>>> It failed with: >>>>>>> >>>>>>> _java.security.NoSuchAlgorithmException_: Error constructing >>>>>>> implementation (algorithm: Default, provider: SunJSSE, class: >>>>>>> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl). >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.tryWithMex >>>>>>> (U >>>>>>> n >>>>>>> k >>>>>>> n >>>>>>> own >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.parse(Unkn >>>>>>> ow >>>>>>> n >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.client.WSServiceDelegate.parseWSDL(Unkno >>>>>>> wn >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.spi.ProviderImpl.createServiceDelegate(U >>>>>>> nk >>>>>>> n >>>>>>> o >>>>>>> w >>>>>>> n >>>>>>> Source) >>>>>>> >>>>>>> at javax.xml.ws.Service.<init>(Unknown Source) >>>>>>> >>>>>>> at >>>>>>> org.signserver.protocol.ws.gen.SignServerWSService.<init>(_SignS >>>>>>> er >>>>>>> v >>>>>>> e >>>>>>> r >>>>>>> WSService.java:42_) >>>>>>> >>>>>>> at >>>>>>> org.signserver.client.api.SigningAndValidationWS.<init>(_Signing >>>>>>> An >>>>>>> d >>>>>>> V >>>>>>> a >>>>>>> lidationWS.java:120_) >>>>>>> >>>>>>> at >>>>>>> org.signserver.client.api.SigningAndValidationWS.<init>(_Signing >>>>>>> An >>>>>>> d >>>>>>> V >>>>>>> a >>>>>>> lidationWS.java:83_) >>>>>>> >>>>>>> at >>>>>>> certificate.model.ModelDocumento.assinarDocumento4(_ModelDocumento. >>>>>>> j >>>>>>> a >>>>>>> va:145_) >>>>>>> >>>>>>> at >>>>>>> certificate.principal.Principal.main(_Principal.java:70_) >>>>>>> >>>>>>> Caused by: _java.net.SocketException_: >>>>>>> _java.security.NoSuchAlgorithmException_: Error constructing >>>>>>> implementation (algorithm: Default, provider: SunJSSE, class: >>>>>>> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl) >>>>>>> >>>>>>> at >>>>>>> javax.net.ssl.DefaultSSLSocketFactory.throwException(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> javax.net.ssl.DefaultSSLSocketFactory.createSocket(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.https.HttpsClient.createSocket(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at sun.net.NetworkClient.doConnect(Unknown Source) >>>>>>> >>>>>>> at sun.net.www.http.HttpClient.openServer(Unknown Source) >>>>>>> >>>>>>> at sun.net.www.http.HttpClient.openServer(Unknown Source) >>>>>>> >>>>>>> at sun.net.www.protocol.https.HttpsClient.<init>(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at sun.net.www.protocol.https.HttpsClient.New(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.ge >>>>>>> tN >>>>>>> e >>>>>>> w >>>>>>> H >>>>>>> ttpClient(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.co >>>>>>> nn >>>>>>> e >>>>>>> c >>>>>>> t >>>>>>> (Unknown >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unkno >>>>>>> wn >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream >>>>>>> (U >>>>>>> n >>>>>>> k >>>>>>> n >>>>>>> own >>>>>>> Source) >>>>>>> >>>>>>> at java.net.URL.openStream(Unknown Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.createRead >>>>>>> er >>>>>>> ( >>>>>>> U >>>>>>> n >>>>>>> known >>>>>>> Source) >>>>>>> >>>>>>> at >>>>>>> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.resolveWSD >>>>>>> L( >>>>>>> U >>>>>>> n >>>>>>> k >>>>>>> nown Source) >>>>>>> >>>>>>> ... 11 more >>>>>>> >>>>>> >>>>>> Have you defined the javax.net.ssl.trustStore and >>>>>> javax.net.ssl.trustStorePassword system properties? >>>>>> >>>>>> See >>>>>> http://signserver.org/manual/integration.html#Signing%20and%20val >>>>>> id >>>>>> a >>>>>> t >>>>>> i >>>>>> ng%20an%20XML%20document >>>>>> for an example. >>>>>> >>>>>> >>>>>> Best regards, >>>>>> Markus >>>>>> >>>>>> >>>>>> PrimeKey Solutions offers a commercial EJBCA & SignServer support >>>>>> subscription and training. Please see www.primekey.se >>>>>> <http://www.primekey.se> <http://www.primekey.se> or contact >>>>>> in...@pr... for more information. >>>>>> http://www.primekey.se/Services/Support/ >>>>>> http://www.primekey.se/Services/Training/ >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>>> >>>> ------------------------------------------------------------------- >>>> -- >>>> - >>>> ------ >>>> -- >>>> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, >>>> CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your >>>> skills current with LearnDevNow - 3,200 step-by-step video >>>> tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: >>>> http://p.sf.net/sfu/learnmore_122712 >>>> _______________________________________________ >>>> SignServer-develop mailing list >>>> Sig...@li... >>>> https://lists.sourceforge.net/lists/listinfo/signserver-develop >>>> >>>> ----- >>>> Nenhum vírus encontrado nessa mensagem. >>>> Verificado por AVG - www.avgbrasil.com.br >>>> Versão: 2013.0.2805 / Banco de dados de vírus: 2637/6019 - Data de >>>> Lançamento: 01/08/13 >>>> >>>> ----- >>>> Nenhum vírus encontrado nessa mensagem. >>>> Verificado por AVG - www.avgbrasil.com.br >>>> Versão: 2013.0.2890 / Banco de dados de vírus: 2638/6032 - Data de >>>> Lançamento: 01/14/13 >>>> >>>> >>>> ------------------------------------------------------------------- >>>> -- >>>> - >>>> -------- Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, >>>> HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep >>>> your skills current with LearnDevNow - 3,200 step-by-step video >>>> tutorials by Microsoft MVPs and experts. SALE $99.99 this month >>>> only -- learn more at: >>>> http://p.sf.net/sfu/learnmore_122412 >>>> _______________________________________________ >>>> SignServer-develop mailing list >>>> Sig...@li... >>>> https://lists.sourceforge.net/lists/listinfo/signserver-develop >>>> >>> >>> >>> >>> -- >>> Kind regards, >>> Markus Kilås >>> Security Consultant & Developer >>> >>> PrimeKey Solutions AB >>> >>> Anderstorpsv. 16 >>> 171 54 Solna >>> Sweden >>> >>> Phone: +46 70 424 94 85 >>> Skype: markusatskype >>> Email: mar...@pr... >>> >>> www.primekey.se >>> >>> >>> >>> ----- >>> Nenhum vírus encontrado nessa mensagem. >>> Verificado por AVG - www.avgbrasil.com.br >>> Versão: 2013.0.2890 / Banco de dados de vírus: 2638/6033 - Data de >>> Lançamento: 01/14/13 >>> >>> ----- >>> Nenhum vírus encontrado nessa mensagem. >>> Verificado por AVG - www.avgbrasil.com.br >>> Versão: 2013.0.2890 / Banco de dados de vírus: 2638/6034 - Data de >>> Lançamento: 01/15/13 >>> >>> >>> -------------------------------------------------------------------- >>> -- >>> -------- Master SQL Server Development, Administration, T-SQL, SSAS, >>> SSIS, SSRS and more. Get SQL Server skills now (including 2012) with >>> LearnDevNow - >>> 200+ hours of step-by-step video tutorials by Microsoft MVPs and experts. >>> SALE $99.99 this month only - learn more at: >>> http://p.sf.net/sfu/learnmore_122512 >>> _______________________________________________ >>> SignServer-develop mailing list >>> Sig...@li... >>> https://lists.sourceforge.net/lists/listinfo/signserver-develop >>> >> >> >> >> -- >> Kind regards, >> Markus Kilås >> Security Consultant & Developer >> >> PrimeKey Solutions AB >> >> Anderstorpsv. 16 >> 171 54 Solna >> Sweden >> >> Phone: +46 70 424 94 85 >> Skype: markusatskype >> Email: mar...@pr... >> >> www.primekey.se >> >> >> >> ----- >> Nenhum vírus encontrado nessa mensagem. >> Verificado por AVG - www.avgbrasil.com.br >> Versão: 2013.0.2890 / Banco de dados de vírus: 2638/6034 - Data de >> Lançamento: 01/15/13 >> >> ----- >> Nenhum vírus encontrado nessa mensagem. >> Verificado por AVG - www.avgbrasil.com.br >> Versão: 2013.0.2890 / Banco de dados de vírus: 2638/6034 - Data de >> Lançamento: 01/15/13 >> >> >> --------------------------------------------------------------------- >> --------- Master Java SE, Java EE, Eclipse, Spring, Hibernate, >> JavaScript, jQuery and much more. Keep your Java skills current with >> LearnJavaNow - >> 200+ hours of step-by-step video tutorials by Java experts. >> SALE $49.99 this month only -- learn more at: >> http://p.sf.net/sfu/learnmore_122612 >> _______________________________________________ >> SignServer-develop mailing list >> Sig...@li... >> https://lists.sourceforge.net/lists/listinfo/signserver-develop >> > > > -- Kind regards, Markus Kilås Security Consultant & Developer PrimeKey Solutions AB Anderstorpsv. 16 171 54 Solna Sweden Phone: +46 70 424 94 85 Skype: markusatskype Email: mar...@pr... www.primekey.se ----- Nenhum vírus encontrado nessa mensagem. Verificado por AVG - www.avgbrasil.com.br Versão: 2013.0.2890 / Banco de dados de vírus: 2639/6038 - Data de Lançamento: 01/16/13 ----- Nenhum vírus encontrado nessa mensagem. Verificado por AVG - www.avgbrasil.com.br Versão: 2013.0.2890 / Banco de dados de vírus: 2639/6038 - Data de Lançamento: 01/16/13 |