[JBoss Web Services] - Re: How can I do mutual SSL when using JBoss as Web service
by Richard Gomes
Richard Gomes [http://community.jboss.org/people/richard.anywhere] created the discussion
"Re: How can I do mutual SSL when using JBoss as Web service"
To view the discussion, visit: http://community.jboss.org/message/570402#570402
--------------------------------------------------------------
As this is high on the Google search results for "jboss WS Client Mutual Certificate" and doesn't have a posted resolution, I thought I'd post what I did to get everything working.
The basic principle here is that BOTH the Web Service (WS) and the Web Service Client (WS-C) need to have the other's key stored as "trusted". Specifically, the following needs to be set ON BOTH SIDES:
-Djavax.net.ssl.trustStore=/home/dev/.truststore
-Djavax.net.ssl.trustStorePassword=changeit
Now, both sides also need their own keystore. The key of WS needs to be trusted by WS-C and vice-versa. Set the following ON BOTH SIDES:
-Djavax.net.ssl.keyStore=/home/dev/.keystore
-Djavax.net.ssl.keyStorePassword=changeit
To get something up and running quickly, use the same keystore and truststore on both sides ... even simpler, you can create a new keystore and simply copy the output file to also become the truststore:
$JAVA_HOME/bin/keytool -genkey -alias jboss -keyalg RSA
cp .keystore .truststore
You can also do an explicit import to load a key into a truststore:
keytool -import -alias jboss -file certificate -storepass changeit -keystore .truststore
This all worked for me. If possible, please provide feedback on gotchas or success stories relating to the above.
All the best,
Richard
--------------------------------------------------------------
Reply to this message by going to Community
[http://community.jboss.org/message/570402#570402]
Start a new discussion in JBoss Web Services at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]
15 years, 1 month
[JBoss Tools] - Build XulRunner 1.9 on Linux
by Yahor Radtsevich
Yahor Radtsevich [http://community.jboss.org/people/yradtsevich] modified the document:
"Build XulRunner 1.9 on Linux"
To view the document, visit: http://community.jboss.org/docs/DOC-16537
--------------------------------------------------------------
*Q:* Why do we ever need to build XULRunner?
*A:* There is no official build of XULRunner for Linux x86-64. We have to build it ourself.
h3. Prerequisites
You need some libraries to build XULRunner. If you are using Ubuntu, execute:
> sudo apt-get build-dep firefox
> sudo apt-get install mercurial libasound2-dev libcurl4-openssl-dev libnotify-dev libxt-dev libiw-dev mesa-common-dev autoconf2.13 yasm
Prerequisites for other https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Linux... Linux distributives and https://developer.mozilla.org/en/Build_Documentation#Build_prerequisites OSes.
h3. Getting the source
To clone Mozilla 1.9.1 repository, execute:
> mkdir 191src
> hg clone http://hg.mozilla.org/releases/mozilla-1.9.1/ http://hg.mozilla.org/releases/mozilla-1.9.1/ 191src
> cd 191src
You may find links to other Mozilla versions https://developer.mozilla.org/en/Mozilla_Source_Code_(Mercurial)#mozilla-... here.
Then you need to select a dotversion to build:
> hg tags
It prints a long list of tags:
...
FIREFOX_3_5_17_RELEASE 27311:d5eeb3c15214
...
Let's select the most recent release. In this case it is FIREFOX_3_5_17_RELEASE with revision number 27311.
Update to it:
> hg update 27311
h3. Creation of configuration file
Now you need to create '.mozconfig' file inside 191src folder with the following content:
##########################################################
ac_add_options --enable-application=xulrunner
ac_add_options --disable-debug
ac_add_options --disable-tests
# the following line is needed for Ubuntu/Debian only
ac_add_options --disable-crashreporter
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../xulrunner_build191
#java
ac_add_options --with-java-include-path=/usr/lib/jvm/java-6-sun/include
ac_add_options --with-java-bin-path=/usr/lib/jvm/java-6-sun/bin
##########################################################
These options are tested under Ubuntu 10.10 x86-32 with Sun Java 6 installed. You may need to specify https://developer.mozilla.org/en/Configuring_Build_Options other options for other systems.
h3. Building
>From 191src execute:
> make -f client.mk build
h3. Separating binaries
> cd ..
> cp -L -r ./xulrunner_build191/dist/bin/* xulrunner-1.9.1
That's it! Now you have XULRunner binaries inside xulrunner-1.9.1 folder.
h3. Useful stuff
Register xulrunner for user:
> ./xulrunner --register-user
Register xulrunner for system:
> sudo ./xulrunner --register-global
Information about xulrunner registred for user lies here:
/home/user_name/.gre.d/1.9.conf
Information about xulrunner registred globally lies here:
/etc/gre.d/1.9.conf
View Firefox/XULRunner build options:
about:buildconfig
--------------------------------------------------------------
Comment by going to Community
[http://community.jboss.org/docs/DOC-16537]
Create a new document in JBoss Tools at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=102&co...]
15 years, 1 month
