How I make a web client except any certificate via https

[John Landon]

Hi,
I have jax-ws web service runs via http. There is a wsdl.
I wrote a client that fails on handshake because of the certificate.
How I make the client except everything and just work.
In c# I had to add the following lines of code:

  // callback used to validate the certificate in an SSL conversation
        private static bool ValidateRemoteCertificate(
        object sender,
            X509Certificate certificate,
            X509Chain chain,
            SslPolicyErrors policyErrors
        )
        {
            return true;
        }  

and then the usage:

  // accept any certificate via ssl
            ServicePointManager.ServerCertificateValidationCallback += new RemoteCertificateValidationCallback(
                ValidateRemoteCertificate
            );
  

thanks.

[Ivan Krizsan]

Hi!
Have you tried including the following code snipped on the client side?

static 
    { 
        /* 
         * Java by default verifies that the certificate CN (Common Name) is
         * the same as host name in the URL. If the CN in the certificate is 
         * not the same as the host name, your web service client fails. 
         * This piece of code allows for using localhost as host name 
         * with a certificate in which the CN does not match. 
         * This is meant to be a workaround while developing the web 
         * service and clients and SHOULD be removed in the production 
         * version. 
         */ 
        HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() 
        { 
            public boolean verify(String hostname, SSLSession session) 
            { 
                if (hostname.equals("localhost")) 
                { 
                    return true; 
                } 
                return false; 
            } 
        }); 

If there are problems, try modifying the verify method so that it always returns true.
Best wishes!

[John Landon]

thanks a lot but I do not see that the method verify is being hit (and it did not work) although : HttpsURLConnection.setDefaultHostnameVerifier is executed

[John Landon]

by the way these are the imports I made:
javax.net.ssl.HttpsURLConnection
javax.net.ssl.HostnameVerifier

are these correct?

[Ivan Krizsan]

Hi!

John Landon wrote:by the way these are the imports I made:
javax.net.ssl.HttpsURLConnection
javax.net.ssl.HostnameVerifier
are these correct?

Yes, they are correct.
Did you generate the portable artifacts for the web service client with wsimport?
Best wishes!

[John Landon]

Thank a lot. But this utility does not work. It says:

parsing WSDL...


[ERROR] sun.security.validator.ValidatorException: PKIX path building failed: s
n.security.provider.certpath.SunCertPathBuilderException: unable to find valid
ertification path to requested target

Failed to read the WSDL document: https://localhost:9091/services/WebService?ws
l, because 1) could not find the document; /2) the document could not be read;
) the root element of the document is not <wsdl:definitions>.


[ERROR] failed.noservice=Could not find wsdl:service in the provided WSDL(s):

At least one WSDL with at least one service definition needs to be provided.


Failed to parse the WSDL.

My wsdl is:

 <?xml version="1.0" encoding="UTF-8"?>
<!-- Published by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is JAX-WS RI 2.1.4-b01-. -->
<!-- Generated by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is JAX-WS RI 2.1.4-b01-. -->
<definitions xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="http://webservices.abc.com/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.xmlsoap.org/wsdl/" targetNamespace="http://webservices.abc.com/" name="WebServiceEndpointImplxyzService">
<types>
<xsd:schema>
<xsd:import namespace="http://webservices.abc.com/" schemaLocation="https://localhost:9091/services/WebService?xsd=1"/>
</xsd:schema>
</types>
<message name="getStageEntryStats">
<part name="parameters" element="tns:getStageEntryStats"/>
</message>
<message name="getStageEntryStatsResponse">
<part name="parameters" element="tns:getStageEntryStatsResponse"/>
</message>
<portType name="WebServiceEndpointImplxyz">
<operation name="getStageEntryStats">
<input message="tns:getStageEntryStats"/>
<output message="tns:getStageEntryStatsResponse"/>
</operation>
</portType>
<binding name="WebServiceEndpointImplxyzPortBinding" type="tns:WebServiceEndpointImplxyz">
<soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document"/>
<operation name="getStageEntryStats">
<soap:operation soapAction=""/>
<input>
<soap:body use="literal"/>
</input>
<output>
<soap:body use="literal"/>
</output>
</operation>
</binding>
<service name="WebServiceEndpointImplxyzService">
<port name="WebServiceEndpointImplxyzPort" binding="tns:WebServiceEndpointImplxyzPortBinding">
<soap:address location="https://localhost:9091/services/WebService"/>
</port>
</service>
</definitions>