signserver-develop Mailing List for SignServer (Page 19)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hello Antoine,

I guess you are using JBoss as the application server. You will need to
use HTTPS as we no longer support HTTP for web service calls to JBoss.

The sample code needs to be updated to use HTTPS (port 8442 or 8443). I
have created an issue for it in our issue tracker where you can also see
the details about why:
https://jira.primekey.se/browse/DSS-439

You can use something like the following to use HTTPS on the port 8442:
---
System.setProperty("javax.net.ssl.trustStore", "p12/truststore.jks");
System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
ISigningAndValidation signserver = new
SigningAndValidationWS("localhost", 8442, true);
----
Where truststore.jks is a keystore containing the issuing CA certificate
of the web server certificate as a trusted entry.

Best regards,
Markus

On 12/05/2011 10:34 AM, Antoine Louiset wrote:
> Hello,
>
> I try to use signingandvalidationapi. I get the example on
> signserver.org <http://signserver.org> :
>
> public static void main(String[] args) {
>        try {
>         ISigningAndValidation signserver = new
> SigningAndValidationWS("localhost", 8080);
>
>         // Document to sign
>         byte[] unsigned = "<document><name>Some
> content</name></document>".getBytes();
>         byte[] signed;
>
>         // Signing
>         GenericSignResponse signResp = signserver.sign("XMLSigner",
> unsigned);
>         signed = signResp.getProcessedData();
>         System.out.println("Signed: " + new String(signed));
>
>         // Validating
>         GenericValidationResponse validateResp =
> signserver.validate("DemoXMLValidator", signed);
>         System.out.println("Valid: " + validateResp.isValid());
>
>         if(validateResp.getSignerCertificate() != null) {
>             if(validateResp.getSignerCertificate() instanceof
> X509Certificate) {
>                 X509Certificate signerCert = (X509Certificate)
> validateResp.getSignerCertificate();
>                 System.out.println("Signed by: " +
> signerCert.getSubjectDN().getName());
>             }
>         }
>       } catch (Exception ex) {
>         ex.printStackTrace();
>       }
>     }
>
>
> I got an error message :
> com.sun.xml.ws.client.ClientTransportException: HTTP transport error:
> javax.net.ssl.SSLHandshakeException: Remote host closed connection
> during handshake
>     at
> com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java:119)
>     at
> com.sun.xml.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:128)
>     at
> com.sun.xml.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:74)
>     at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:559)
>     at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:518)
>     at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:503)
>     at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:400)
>     at com.sun.xml.ws.client.Stub.process(Stub.java:235)
>     at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:120)
>     at
> com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:230)
>     at
> com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:210)
>     at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:103)
>     at $Proxy30.process(Unknown Source)
>     at
> org.signserver.client.api.SigningAndValidationWS.process(SigningAndValidationWS.java:146)
>     at
> org.signserver.client.api.SigningAndValidationWS.process(SigningAndValidationWS.java:127)
>     at
> org.signserver.client.api.SigningAndValidationWS.sign(SigningAndValidationWS.java:177)
>     at SignServerClient.main(SignServerClient.java:83)
> Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed
> connection during handshake
>     at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:817)
>     at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1138)
>     at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1165)
>     at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1149)
>     at
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
>     at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
>     at
> sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1014)
>     at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:230)
>     at
> com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java:107)
>     ... 16 more
> Caused by: java.io.EOFException: SSL peer shut down incorrectly
>     at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:333)
>     at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:798)
>     ... 24 more
>
> I have been trying to resolve it during 3 days without any results.
> What can I do ?
>
> Thanks a lot!
>
>
>
> Antoine
>
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure 
> contains a definitive record of customers, application performance, 
> security threats, fraudulent activity, and more. Splunk takes this 
> data and makes sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-novd2d
>
>
> _______________________________________________
> Signserver-develop mailing list
> Sig...@li...
> https://lists.sourceforge.net/lists/listinfo/signserver-develop

-- 
Kind regards,
Markus Kilås
Security Consultant & Developer

PrimeKey Solutions AB

Anderstorpsv. 16
171 54 Solna
Sweden

Phone: +46 70 424 94 85
Skype: markusatskype
Email: mar...@pr...

www.primekey.se

2008	Jan (1)	Feb (4)	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov (4)	Dec
2009	Jan (2)	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct (1)	Nov (4)	Dec
2010	Jan (1)	Feb	Mar	Apr (4)	May	Jun (1)	Jul	Aug	Sep	Oct	Nov	Dec
2011	Jan	Feb	Mar	Apr	May	Jun (1)	Jul (1)	Aug	Sep	Oct	Nov	Dec (3)
2012	Jan (1)	Feb (8)	Mar (10)	Apr	May (12)	Jun (2)	Jul (28)	Aug (15)	Sep (12)	Oct (2)	Nov	Dec (16)
2013	Jan (30)	Feb (1)	Mar	Apr (11)	May (2)	Jun (11)	Jul (15)	Aug (4)	Sep (1)	Oct (10)	Nov (1)	Dec (2)
2014	Jan (8)	Feb (13)	Mar (12)	Apr (24)	May (2)	Jun (1)	Jul (1)	Aug	Sep (2)	Oct (1)	Nov (2)	Dec (1)
2015	Jan (3)	Feb (6)	Mar	Apr	May (7)	Jun (7)	Jul (3)	Aug (5)	Sep (1)	Oct (8)	Nov (6)	Dec
2016	Jan	Feb (3)	Mar (5)	Apr (9)	May (26)	Jun (8)	Jul	Aug	Sep (11)	Oct (8)	Nov (1)	Dec (2)
2017	Jan (4)	Feb (7)	Mar (7)	Apr (4)	May (1)	Jun (5)	Jul (3)	Aug (3)	Sep (1)	Oct (4)	Nov (5)	Dec (1)
2018	Jan (4)	Feb (1)	Mar (1)	Apr (1)	May	Jun (1)	Jul	Aug	Sep	Oct	Nov	Dec
2019	Jan	Feb (1)	Mar (2)	Apr (1)	May	Jun	Jul	Aug	Sep (1)	Oct	Nov (2)	Dec
2020	Jan (3)	Feb	Mar (2)	Apr (3)	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2021	Jan	Feb	Mar	Apr (1)	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2022	Jan	Feb	Mar	Apr	May	Jun (2)	Jul	Aug	Sep (1)	Oct	Nov	Dec (1)
2023	Jan	Feb	Mar	Apr	May	Jun	Jul (1)	Aug	Sep	Oct	Nov	Dec (1)
2025	Jan	Feb (1)	Mar	Apr (1)	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec