Return-Path: Delivered-To: apmail-cxf-issues-archive@www.apache.org Received: (qmail 33189 invoked from network); 26 Aug 2009 21:48:28 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 26 Aug 2009 21:48:28 -0000 Received: (qmail 48046 invoked by uid 500); 26 Aug 2009 21:48:28 -0000 Delivered-To: apmail-cxf-issues-archive@cxf.apache.org Received: (qmail 47963 invoked by uid 500); 26 Aug 2009 21:48:28 -0000 Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list issues@cxf.apache.org Received: (qmail 47941 invoked by uid 99); 26 Aug 2009 21:48:28 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 26 Aug 2009 21:48:28 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 26 Aug 2009 21:48:19 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 77C99234C053 for ; Wed, 26 Aug 2009 14:47:59 -0700 (PDT) Message-ID: <1166816434.1251323279489.JavaMail.jira@brutus> Date: Wed, 26 Aug 2009 14:47:59 -0700 (PDT) From: "Wolfgang Nagele (JIRA)" To: issues@cxf.apache.org Subject: [jira] Updated: (CXF-2403) Use of client certificates via http conduit configuration broken In-Reply-To: <1655071651.1251207599327.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/CXF-2403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Wolfgang Nagele updated CXF-2403: --------------------------------- Attachment: (was: client.p12) > Use of client certificates via http conduit configuration broken > ---------------------------------------------------------------- > > Key: CXF-2403 > URL: https://issues.apache.org/jira/browse/CXF-2403 > Project: CXF > Issue Type: Bug > Components: Configuration > Reporter: Wolfgang Nagele > Attachments: keystore > > > To use standard SSL client certificates for authentication the following configuration should work: > > > > > > > > > > > In this configuration we would have the public certificate of the server we want to connect to in the truststore and the private key and certificate in the keystore. > With the current CXF implementation this results in the following exception: > sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target > at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174) [na:1.6.0_13] > at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) [na:1.6.0_13] > at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) [na:1.6.0_13] > ... 39 common frames omitted > Once we additionally define the following properties it works: > * javax.net.ssl.keyStore=keystore > * javax.net.ssl.keyStorePassword=password > * javax.net.ssl.trustStore=truststore > * javax.net.ssl.trustStorePassword=password > This however results in very ugly setups where we have to define the same data twice. Also we miss out on CXF's option of defining specific keystores and truststores per webservice. > For further information also see: http://www.quendor.org/archiv/428 -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.