[JBoss Web Services] - Re: How can I do mutual SSL when using JBoss as Web service
by Richard Gomes
Richard Gomes [http://community.jboss.org/people/richard.anywhere] created the discussion
"Re: How can I do mutual SSL when using JBoss as Web service"
To view the discussion, visit: http://community.jboss.org/message/570402#570402
--------------------------------------------------------------
As this is high on the Google search results for "jboss WS Client Mutual Certificate" and doesn't have a posted resolution, I thought I'd post what I did to get everything working.
The basic principle here is that BOTH the Web Service (WS) and the Web Service Client (WS-C) need to have the other's key stored as "trusted". Specifically, the following needs to be set ON BOTH SIDES:
-Djavax.net.ssl.trustStore=/home/dev/.truststore
-Djavax.net.ssl.trustStorePassword=changeit
Now, both sides also need their own keystore. The key of WS needs to be trusted by WS-C and vice-versa. Set the following ON BOTH SIDES:
-Djavax.net.ssl.keyStore=/home/dev/.keystore
-Djavax.net.ssl.keyStorePassword=changeit
To get something up and running quickly, use the same keystore and truststore on both sides ... even simpler, you can create a new keystore and simply copy the output file to also become the truststore:
$JAVA_HOME/bin/keytool -genkey -alias jboss -keyalg RSA
cp .keystore .truststore
You can also do an explicit import to load a key into a truststore:
keytool -import -alias jboss -file certificate -storepass changeit -keystore .truststore
This all worked for me. If possible, please provide feedback on gotchas or success stories relating to the above.
All the best,
Richard
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/570402#570402]
Start a new discussion in JBoss Web Services at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
14 years, 11 months
[EJB3] - @SequenceGenerator initial value
by Noa Drach
Noa Drach [http://community.jboss.org/people/newway] created the discussion
"@SequenceGenerator initial value"
To view the discussion, visit: http://community.jboss.org/message/574564#574564
--------------------------------------------------------------
@Id
@GeneratedValue(strategy = SEQUENCE, generator = "SEQ_ACE_ACTIVE_CI")
@SequenceGenerator(name = "SEQ_ACE_ACTIVE_CI", sequenceName = "SEQ_ACE_ACTIVE_CI", allocationSize = 500)
I'm running on JBOSS 4.2.3.GA for java 6
in my entities I connect between a real DB sequence and the Id field in the following way
@Id
@GeneratedValue(strategy = SEQUENCE, generator = "SEQ_NAME")
@SequenceGenerator(name = "SEQ_NAME", sequenceName = "SEQ_NAME", allocationSize = 500)
I put the allocation size as 500 since after some performance tests i run i saw that prevents it from going to the DB for each insert and doing
select seq.nextval from dual
- I'm using Oracle , and the above is probably not the exact syntax, just the general idea.
the thing is that although my sequence is defined with an initial value of 1000 in the DB is see that all my generated entities start with id 500000 and each time I restart my server it jumps in 500 and in the meanwhile if I look at my sequences I see that the don't progress above the initial value of 1000.
I feel stupid just asking this question, but if you can just explain to me what's missing in my understanding or point me to where this was already discussed I'll be grateful, since I couldn't find the explanation on my own. :-/
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/574564#574564]
Start a new discussion in EJB3 at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
14 years, 11 months
[jBPM] - Re: JBPM 4.0 in Web Application
by Anand Prakash
Anand Prakash [http://community.jboss.org/people/anandintouch] created the discussion
"Re: JBPM 4.0 in Web Application"
To view the discussion, visit: http://community.jboss.org/message/570145#570145
--------------------------------------------------------------
Hi Deepak,
Did you get your answer about creating sample web application and using JBPM4 in it?
I'm using user doc from jboss jbpm4 and able to run jbpm-console application but they have target to create user-webapp in build.xml file under >install
directory and I'm able to build sample user-weapp which creates user-webapp under \jbpm-4.4\install\generated\user-webapp .But not sure how to deploy on jboss5.1.0 and i've noticed that user-webapp folder doesn't have web.xml.So that could be the reason ,it's not deploying on jboss properly.
If you have done this sample user-webapp deployment successfully or any other sample web app using jbpm4 in it then please let me know.
Thanks,
Anand
mailto:anandintouch@gmail.com anandintouch(a)gmail.com
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/570145#570145]
Start a new discussion in jBPM at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
14 years, 11 months
[JBoss Tools] - JBoss tools 3.2B1 sometimes doesn't deploy classes in web module
by arjan tijms
arjan tijms [http://community.jboss.org/people/atijms] created the discussion
"JBoss tools 3.2B1 sometimes doesn't deploy classes in web module"
To view the discussion, visit: http://community.jboss.org/message/570116#570116
--------------------------------------------------------------
Hi,
I'm using JBoss Tools 3.2 beta 1 with Eclipse 3.6.1 on Ubuntu 10.10 (64 bits) on JDK6U21. I have an EAR project that is deployed to JBoss AS 5.1. This initially works correctly, but after I stop the server, make some changes to my files, pull in new changes from Mercurial etc I restart the server.
I then get class not found errors, and when I inspect the deployment in JBoss AS it seems that there are most classes are missing in the web module's WEB-INF directory. Strangely however, there are some classes that are deployed and for some classes that are missing, the package folder is there but it's empty.
The "Server Log" view for the JBoss 5.1 Runtime Server mentions under the Publishing node:
1 files modified in module my_main_ejb 31 minutes, 2 seconds ago
81 files modified in module my_main_web 31 minutes, 2 seconds ago
The 31 minutes exactly corresponds with the time I started the server and the classes where missing. The Modified time of the files that are present in the WEB-INF/classes also corresponds with this.
I did notice that there are some suspect events in the log, but these are dated a couple of hours back where the deploy did work. It is:
No publisher found for module DeletedModule[saxon9.jar,org.eclipse.jst.jee.server:/binary:/home/myuser/workspace/my_main/libraries/saxon9.jar.
This did happen a couple of time before, and I could fix it by closing and re-opening the EAR and it's associated web and EJB projects and cleaning, restarting, etc (don't know exactly in which order). I remember a very similar bug in JBoss tools 3.1 where sometimes only the most recently touched files where deployed.
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/570116#570116]
Start a new discussion in JBoss Tools at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
14 years, 12 months
[JBoss Remoting] - Encrypt SSL KeyStorePassword in remoting-sslbisocket-service.xml
by Nikos Massios
Nikos Massios [http://community.jboss.org/people/massios] created the discussion
"Encrypt SSL KeyStorePassword in remoting-sslbisocket-service.xml"
To view the discussion, visit: http://community.jboss.org/message/576595#576595
--------------------------------------------------------------
Hello,
I am using jboss 5.1 GA.
I would like to encrypt the ssl keystore password in the remoting-sslbisocket-service.xml of jboss messaging. This xml contains the following mbean configuration. This xml of jboss messaging is using the org.jboss.remoting.securirity.SSLSocketBuilder mbean of jboss remoting. From what I can see here http://docs.jboss.org/jbosasremoting/docs/api/org/jboss/remoting/security... http://docs.jboss.org/jbosasremoting/docs/api/org/jboss/remoting/security... there is no way to encrypt the keystore, trustsore passwords. Am I correct? Has anyone tried extending the SSLSocketBuilder class to provide such functionality? I am considering doing this myself.
Thanks,
Nikos.
mbean code=org.jboss.remoting.security.SSLSocketBuilder name=jboss.messaging:service=SocketBuilder,type=SSL display-name=SSL Server Socket Factory Builder>
- <!--
IMPORTANT - If making ANY customizations, this MUST be set to false.
Otherwise, will used default settings and the following attributes will be ignored.
-->
<attribute name="UseSSLServerSocketFactory">false</attribute>
- <!--
This is the url string to the key store to use
-->
<attribute name="KeyStoreURL">${jboss.server.home.url}/conf/ssl/server.keystore</attribute>
- <!--
The password for the key store
-->
<attribute name="KeyStorePassword">MY_PASSWORD_IS_HERE</attribute>
- <!--
The password for the keys (will use KeystorePassword if this is not set explicitly.
-->
- <!--
<attribute name="KeyPassword">secureexample</attribute>
-->
- <!--
The protocol for the SSLContext. Default is TLS.
-->
<attribute name="SecureSocketProtocol">TLS</attribute>
- <!--
The algorithm for the key manager factory. Default is SunX509.
-->
<attribute name="KeyStoreAlgorithm">SunX509</attribute>
- <!--
The type to be used for the key store.
Defaults to JKS. Some acceptable values are JKS (Java Keystore - Sun's keystore format),
JCEKS (Java Cryptography Extension keystore - More secure version of JKS), and
PKCS12 (Public-Key Cryptography Standards #12 keystore - RSA's Personal Information
Exchange Syntax Standard). These are not case sensitive.
-->
<attribute name="KeyStoreType">JKS</attribute>
</mbean>
<
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/576595#576595]
Start a new discussion in JBoss Remoting at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
15 years
[jBPM] - jbpm5 demo - error when starting human task
by Odelya Holiday
Odelya Holiday [http://community.jboss.org/people/odelyaholiday] created the discussion
"jbpm5 demo - error when starting human task"
To view the discussion, visit: http://community.jboss.org/message/572985#572985
--------------------------------------------------------------
Hi!
when I run start.demo I get the following mistake:
start.human.task:
[javac] C:\jbpm-installer\build.xml:518: warning: 'includeantruntime' was no
t set, defaulting to build.sysclasspath=last; set to false for repeatable builds
[java] SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
[java] SLF4J: Defaulting to no-operation (NOP) logger implementation
[java] SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder http://www.slf4j.org/codes.html#StaticLoggerBinder for fu
rther details.
[java] Task service started correctly !
[java] Task service running ...
[java] Exception in thread "Thread-3" java.lang.RuntimeException: Server Ex
ception with class class org.jbpm.task.service.mina.MinaTaskServer using port 91
23
[java] at org.jbpm.task.service.mina.BaseMinaTaskServer.run(BaseMinaTas
kServer.java:53)
[java] at java.lang.Thread.run(Thread.java:662)
[java] Caused by: java.net.BindException: Address already in use: bind
[java] at sun.nio.ch.Net.bind(Native Method)
[java] at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelIm
pl.java:119)
[java] at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:
59)
[java] at org.apache.mina.transport.socket.nio.NioSocketAcceptor.open(N
ioSocketAcceptor.java:251)
[java] at org.apache.mina.transport.socket.nio.NioSocketAcceptor.open(N
ioSocketAcceptor.java:48)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor.regist
erHandles(AbstractPollingIoAcceptor.java:523)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor.access
$200(AbstractPollingIoAcceptor.java:65)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor$Accept
or.run(AbstractPollingIoAcceptor.java:407)
[java] at org.apache.mina.util.NamePreservingRunnable.run(NamePreservin
gRunnable.java:64)
[java] at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Thread
PoolExecutor.java:886)
[java] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool
Executor.java:908)
[java] ... 1 more
start.human.task:
[javac] C:\jbpm-installer\build.xml:518: warning: 'includeantruntime' was no
t set, defaulting to build.sysclasspath=last; set to false for repeatable builds
[java] SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
[java] SLF4J: Defaulting to no-operation (NOP) logger implementation
[java] SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for fu
rther details.
[java] Task service started correctly !
[java] Task service running ...
[java] Exception in thread "Thread-3" java.lang.RuntimeException: Server Ex
ception with class class org.jbpm.task.service.mina.MinaTaskServer using port 91
23
[java] at org.jbpm.task.service.mina.BaseMinaTaskServer.run(BaseMinaTas
kServer.java:53)
[java] at java.lang.Thread.run(Thread.java:662)
[java] Caused by: java.net.BindException: Address already in use: bind
[java] at sun.nio.ch.Net.bind(Native Method)
[java] at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelIm
pl.java:119)
[java] at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:
59)
[java] at org.apache.mina.transport.socket.nio.NioSocketAcceptor.open(N
ioSocketAcceptor.java:251)
[java] at org.apache.mina.transport.socket.nio.NioSocketAcceptor.open(N
ioSocketAcceptor.java:48)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor.regist
erHandles(AbstractPollingIoAcceptor.java:523)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor.access
$200(AbstractPollingIoAcceptor.java:65)
[java] at org.apache.mina.core.polling.AbstractPollingIoAcceptor$Accept
or.run(AbstractPollingIoAcceptor.java:407)
[java] at org.apache.mina.util.NamePreservingRunnable.run(NamePreservin
gRunnable.java:64)
[java] at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Thread
PoolExecutor.java:886)
[java] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool
Executor.java:908)
[java] ... 1 more
I searched:
netstat -an | findstr 0.0.9123
But nothing was found!
What could be the problem?
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/572985#572985]
Start a new discussion in jBPM at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
15 years