<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Jboss 6.1.0 + Jboss native WS +Message Signing
</h3>
<span style="margin-bottom: 10px;">
created by <a href="https://community.jboss.org/people/seeaganesh">ganesh jadhav</a> in <i>JBoss Web Services</i> - <a href="https://community.jboss.org/message/727703#727703">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>Hi,</p><p>Configuration :</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Jboss version : Jboss 6.1.0</p><p>Jboss WS native lib : jbossws-native-4.0.0.CR1</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I have deployed a WS (EJB 3.0 exposed as WS). </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>EJB Code :</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>@WebService (name="TestWSEJBRemote",serviceName = "TestWSEJBService")</strong></p><p><strong>@SOAPBinding(style = SOAPBinding.Style.DOCUMENT)</strong></p><p><strong>@Remote(TestWSEJBRemote.class)</strong></p><p><strong>@EndpointConfig(configName = "Standard WSSecurity Endpoint")</strong></p><p><strong>@SecurityDomain("JBossWS")</strong></p><p><strong>@Stateless (name = "TestWSEJBRemote")</strong></p><p><strong>public class TestWSEJB implements TestWSEJBRemote{</strong></p><p><strong>@WebMethod</strong></p><p><strong>public String ping (String name)</strong></p><p><strong>{</strong></p><p><strong>return "Hello : " + name;</strong></p><p><strong>}</strong></p><p><strong>}</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Remote Interface :</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>@WebService</strong></p><p><strong>public interface TestWSEJBRemote {</strong></p><p><strong>    public String ping (String name);</strong></p><p><strong>}</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>----------------------------------------------------------</p><p>I created keystore, truststore and certificates like this.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Create the server keystore</strong></p><p><strong>keytool -genkey -alias serverkeys -keyalg RSA -keystore server.keystore -storepass 123456 -keypass 123456 -dname "CN=localhost, OU=MYOU, O=MYORG, L=MYCITY, ST=MYSTATE, C=MY" </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Create the server certificate</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>keytool -export -alias serverkeys -keystore server.keystore -storepass 123456 -file server.cer </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Create the client keystore</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>keytool -genkey -alias clientkeys  -keyalg RSA -keystore client.keystore -storepass 123456 -keypass 123456 -dname "CN=localhost, OU=MYOU, O=MYORG, L=MYCITY, S=MYSTATE, C=MY"  </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Create the client certificate</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>keytool -export -alias clientkeys -keystore client.keystore -storepass 123456 -file client.cer </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Import server certificate into client truststore</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>keytool -import -v -keystore client.truststore  -storepass 123456 -file server.cer </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Import client certificate into server truststore</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>keytool -import -v -keystore server.truststore  -storepass 123456 -file client.cer</strong></p><p><strong>----------------------------------------------------------------------------------------------------------------------------------------------</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Client Code :</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>URL url = new URL(</strong></p><p><strong><span>                    "</span><a class="jive-link-external-small" href="http://XXX:8380/testmewsse/TestWSEJBService/TestWSEJBRemote?wsdl" target="_blank">http://XXX:8380/testmewsse/TestWSEJBService/TestWSEJBRemote?wsdl</a><span>");</span></strong></p><p><strong><span>            QName qn = new QName("</span><a class="jive-link-external-small" href="http://ejb.wsse.gj.com/" target="_blank">http://ejb.wsse.gj.com/</a><span>", "TestWSEJBService");</span></strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.keyStore","./resources/client.keystore");</strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.keyStorePassword","123456");</strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.trustStore","./resources/client.truststore");</strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.trustStorePassword","123456");</strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.keyStoreType","jks");</strong></p><p><strong>            System.setProperty("org.jboss.ws.wsse.trustStoreType","jks");</strong></p><p><strong>            Service s = Service.create(url, qn);</strong></p><p><strong>            s.getPorts();</strong></p><p><strong>            TestWSEJBRemote port = s.getPort(TestWSEJBRemote.class);</strong></p><p>            </p><p><strong>            URL securityURL = new File(</strong></p><p><strong>                    "resources/jboss-wsse-client.xml").toURL();</strong></p><p><strong>            ((StubExt) port).setSecurityConfig(securityURL.toExternalForm());</strong></p><p><strong>            ((StubExt) port).setConfigName("Standard WSSecurity Client");</strong></p><p><strong>            //((StubExt) port).("Standard WSSecurity Client");</strong></p><p><strong>            ((BindingProvider) port).getRequestContext().put(</strong></p><p><strong>                    BindingProvider.USERNAME_PROPERTY, "kermit");</strong></p><p><strong>            ;</strong></p><p><strong>            ((BindingProvider) port).getRequestContext().put(</strong></p><p><strong>                    BindingProvider.PASSWORD_PROPERTY, "thefrog");</strong></p><p><strong>            ;</strong></p><p><strong>            System.out.println("Invoking the sayHello operation on the port.");</strong></p><p><strong>            String response = port.ping("ganesh");</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>------------------------------------</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>All files keystore and truststore files are placed at right location. The server.log shows the incoming signed message, and the dispatched signed outgoing messages to the above client.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>The client is not able to decode the return message.<strong> (it says there is internal WS error please see the log, no log is generated at client side).</strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>After debugging the native code source, i found it out that the <strong>validateCertificate</strong> method of the <strong>org.jboss.ws.extensions.security.SecurityStore</strong> is getting falied while calling </p><p>parameters = new PKIXParameters(trustStore); </p><p>I am getting  <strong>"the trustAnchors parameters must  be non-null"  </strong>exception. I inspected the trustStore, it does contain the certificate with proper alias name in my case it is  <strong>"clientkeys". </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Am i correctly creating all keystores and trustores? </strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong>Regards</strong></p><p><strong>Ganesh<br/></strong></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><strong><br/></strong></p><p><strong><br/></strong></p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/727703#727703">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JBoss Web Services at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2044">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>