Re: [SignServer-develop] https://www.dropbox.com/s/j26utpb9adsjwgr/Neutrno_demo_10_27.mov?dl=0

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Isn't the WS call to adm:addAuthorizedClient equivalent to the CLI command
"signserver addauthorizedclient"?.

Anyway, you could be missing to add the CA that issued your client
certificate to JBoss truststore.jks, see
https://www.signserver.org/doc/current/manual/installguide.html#JBoss_7EAP_6_SSL_configuration

Sent from Android.

On Nov 7, 2017 1:13 AM, "Raj Murtinty" <raj...@gm...> wrote:

Hi,

I'm trying to test the web services call using SOAPui to the sign server
and I've come across the following error:

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:adm="http://adminws.signserver.org/">
   <soapenv:Header/>
   <soapenv:Body>
      <adm:addAuthorizedClient>
         <workerId>1</workerId>
         <!--Optional:-->
         <authClient>
            <!--Optional:-->
            <certSN>client certSN</certSN>      (In yellow are client
certificate credentials)
            <!--Optional:-->
            <issuerDN>C=.., O=...., CN=....</issuerDN>
         </authClient>
      </adm:addAuthorizedClient>
   </soapenv:Body>
</soapenv:Envelope>

Response:

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
   <soap:Body>
      <soap:Fault>
         <faultcode>soap:Server</faultcode>
         <faultstring>Administrator not authorized to resource. Client
certificate authentication required.</faultstring>
         <detail>
            <ns1:AdminNotAuthorizedException xmlns:ns1="http://adminws.
signserver.org/"/>
         </detail>
      </soap:Fault>
   </soap:Body>
</soap:Envelope>

I also have myClient certificate in the SSL settings in SOAPui.

Also I have added myClient.pem to the signserver using the signserver
addauthorizedclient
command

I'd like to know, which credentials need to be given and are there
additional information to be added in the soap body apart from the above
parameters.

Thanks
Raj..

------------------------------------------------------------
------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
SignServer-develop mailing list
Sig...@li...
https://lists.sourceforge.net/lists/listinfo/signserver-develop