Return-Path: Delivered-To: apmail-xml-axis-dev-archive@xml.apache.org Received: (qmail 2505 invoked by uid 500); 21 Nov 2002 18:23:40 -0000 Mailing-List: contact axis-dev-help@xml.apache.org; run by ezmlm Precedence: bulk Reply-To: axis-dev@xml.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list axis-dev@xml.apache.org Received: (qmail 2495 invoked from network); 21 Nov 2002 18:23:40 -0000 In-Reply-To: <0016E6145796E14680B831BB76A2129E85A609@mailserver.it-innovation.soton.ac.uk> To: axis-dev@xml.apache.org MIME-Version: 1.0 Subject: Re: Axis seems to ignore JSSE System Properties X-Mailer: Lotus Notes Release 6.0 September 26, 2002 From: Richard Sitze Message-ID: Date: Thu, 21 Nov 2002 12:23:39 -0600 X-MIMETrack: Serialize by Router on D03NM145/03/M/IBM(Release 6.0 [IBM]|November 8, 2002) at 11/21/2002 11:23:40, Serialize complete at 11/21/2002 11:23:40 Content-Type: multipart/alternative; boundary="=_alternative 0064E79886256C78_=" X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N This is a multipart message in MIME format. --=_alternative 0064E79886256C78_= Content-Type: text/plain; charset="US-ASCII" Please try newer (nightly) build. JSSE code has changed/been-fixed since 1.0 I believe. ******************************************* Richard A. Sitze IBM WebSphere WebServices Development "Darren Marvin" 11/21/2002 03:17 AM Please respond to axis-dev To: cc: Subject: Axis seems to ignore JSSE System Properties Hi, I did post the following to the user list, but since I may be looking at changing Axis source code it may be better posting it here. ====================================================== I am using Axis web services over HTTPS with both client and server certificate authentication. Everything is fine as long as I use only the default keystore location $HOME/.keystore and default password 'changeit'. I would like to specify alternative values for these variables. You can do this for JSSE by setting the following System Properties: javax.net.ssl.KeyStore and javax.net.ssl.KeyStorePassword Unfortunately if I do set these then Axis seems to ignore them when it makes its invocation. I have looked at the Axis source code and discovered that JSSESocketFactory is the class that sets up the HTTPS socket connection. It has some default values for the keystore etc but also allows overiding them with values from the handler options. Unfortunately I don't think this class reads the the ssl system properties. I don't want to have to change the Axis source if I can help it. Any help / pointers to better solutions would be appreciated Thanks, Darren. --=_alternative 0064E79886256C78_= Content-Type: text/html; charset="US-ASCII"
Please try newer (nightly) build.  JSSE code has changed/been-fixed since 1.0 I believe.

*******************************************
Richard A. Sitze
IBM WebSphere WebServices Development


"Darren Marvin" <djm@it-innovation.soton.ac.uk>

11/21/2002 03:17 AM
Please respond to axis-dev

       
        To:        <axis-dev@xml.apache.org>
        cc:        
        Subject:        Axis seems to ignore JSSE System Properties



Hi,

I did post the following to the user list, but since I may be looking at changing Axis source code it may be better posting it here.

======================================================

I am using Axis web services over HTTPS with both client and server certificate authentication. Everything is fine as long as I use only the default keystore location $HOME/.keystore and default password 'changeit'. I would like to specify alternative values for these variables. You can do this for JSSE by setting the following System Properties:

javax.net.ssl.KeyStore and javax.net.ssl.KeyStorePassword

Unfortunately if I do set these then Axis seems to ignore them when it makes its invocation. I have looked at the Axis source code and discovered that JSSESocketFactory is the class that sets up the HTTPS socket connection. It has some default values for the keystore etc but also allows overiding them with values from the handler options. Unfortunately I don't think this class reads the the ssl system properties. I don't want to have to change the Axis source if I can help it.

Any help / pointers to better solutions would be appreciated

Thanks,

Darren.
--=_alternative 0064E79886256C78_=--