[ http://jira.jboss.com/jira/browse/JBWS-2216?page=all ] Alessio Soldano updated JBWS-2216: ---------------------------------- Fix Version/s: jbossws-native-3.0.3 Priority: Major (was: Critical) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBWS-2216?page=com.atlassian.jira.plug... ] Richard Opalka commented on JBWS-2216: -------------------------------------- I commented out SSL connector in server/default/deploy/jboss-web.deployer/server.xml <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" /> I generated keystore and digitally signed the certificate: [/home/opalka][/home/opalka]>keytool -genkey -alias tomcat -keyalg RSA -validity 1095 -keystore ~/.keystore Enter keystore password: changeit What is your first and last name? [Unknown]: 127.0.0.1 What is the name of your organizational unit? [Unknown]: servers What is the name of your organization? [Unknown]: Organization name What is the name of your City or Locality? [Unknown]: My Country What is the name of your State or Province? [Unknown]: My Republic What is the two-letter country code for this unit? [Unknown]: EN Is CN=127.0.0.1, OU=servers, O=Organization Name, L="My City", ST=My Country, C=EN correct? [no]: yes Enter key password for <tomcat> (RETURN if same as keystore password): [/home/opalka][/home/opalka]>keytool -selfcert -alias tomcat -keystore .keystore Enter keystore password: changeit I commented out webservice secure port in server/default/deploy/jbossws.sar/jbossws.beans/META-INF/jboss-beans.xml <bean name="WSServerConfig" class="org.jboss.wsf.stack.jbws.NativeServerConfig"> <property name="mbeanServer"><inject bean="WSMBeanServerLocator" property="mbeanServer"/></property> <property name="webServiceHost">${jboss.bind.address}</property> <property name="modifySOAPAddress">true</property> <property name="webServiceSecurePort">8443</property> <property name="webServicePort">8080</property> </bean> I updated my web.xml to include security constraints: <?xml version="1.0" encoding="UTF-8"?> <web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4"> <servlet> <servlet-name>TestService</servlet-name> <servlet-class>org.jboss.test.ws.jaxws.samples.webparam.PingServiceImpl</servlet-class> </servlet> <servlet-mapping> <servlet-name>TestService</servlet-name> <url-pattern>/*</url-pattern> </servlet-mapping> <security-constraint> <web-resource-collection> <web-resource-name>All resources</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> </web-app> And everything works as expected. My WSDL contains both https and correct port and it's accessible through https only: <service name="PingServiceImplService"> <port binding="tns:PingServiceBinding" name="PingServicePort"> <soap:address location="https://127.0.0.1:8443/jaxws-samples-webparam"/> </port> </service> -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira