Mailing-List: contact axis-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-dev@ws.apache.org
Date: Wed, 11 Aug 2004 23:36:44 -0700
From: Pravir Ramtekkar <pravir@nms.fnc.fujitsu.com>
Subject: TeustManager and AXIS client.
To: axis-dev@ws.apache.org
Cc: davanum@gmail.com, Davanum Srinivas <dims@yahoo.com>,
        axis-user@ws.apache.org
Message-id: <411B0FFC.2070302@nms.fnc.fujitsu.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.0.1) Gecko/20020920
 Netscape/7.0
References: <411AAA48.5030708@yahoo.com>
 <19e0530f040811210555a389e2@mail.gmail.com>

hi,
I had posted a message on this list about making AXIS client call to 
webservice running HTTPS.
Everybody seems to be importing the certificates into a keystore and 
passing them as a system prop. Problem I have is that I dont want to 
import any certificates for the obvious reasons that they will expire 
someday. rather I overwrite X509TrustManager and set it on the 
HttpsURLConnection as follows :
         X509TrustManager xtm = new MyTrustManager();
         TrustManager mytm[] = {xtm};
         SSLContext ctx = SSLContext.getInstance("SSL");
         ctx.init(null,mytm, null );
         SSLSocketFactory sf = ctx.getSocketFactory();
         HttpsURLConnection.setDefaultSSLSocketFactory(sf);

This works great if I try to connect to Https URL and gives me the 
correct content. but when  I use Locator/Stub my X509TrustMamager is not 
called. How do I tell underlying AXIS  to use my trustmanager?
I see that AXIS has 
org.apache.axis.components.net.SunFakeTrustSocketFactory.FakeX509TrustManager() 
SunFakeTrustSocketFactory nad  but using  this in the above doesn't work 
due to incompatibility of types.
Now the question is do I have to write my TrustManagerFactory and 
SecurityProvider and plug it in or is there any simple way to let AXIS 
know of my Trustmanager I want to  use.

appreciate any help.
thanx,
Pravir