This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal


~Lex Ekfoothernivu
Mar 12, 2014, 10:06 AM
1 Posts

HTTP JVM does not present X.509 (PKCS12) in SSL handshake

  • Category: Application Development
  • Platform: Windows
  • Release: 9.0
  • Role: Administrator,Developer
  • Tags: Certificate,SSL,JVM,HTTP,WebService,PKCS12,X.509
  • Replies: 1

I have a Java agent "WSAgent" that connects to a SOAP WebService provider using javax.xml.soap package.

The WebService requires SSL connection and client certificate (for identification purposes).

The certificate (PKCS12) has been imported into Dominos cacerts using IKEYMAN.

 

1. Running the agent from the server console "tell amgr run" works flawlessly. Connection is established, certificate sent to provider, request sent and reponse received.

2. However! Running the agent from web (ajax/url) does not work. The Domino server reports:

HTTP JVM: SAAJ0008: Bad Response; Forbidden. For more detailed information, please consult error-log-0.xml located in D:/Domino/Data/domino/workspace/logs
HTTP JVM: com.sun.xml.internal.messaging.saaj.SOAPExceptionImpl: com.sun.xml.internal.messaging.saaj.SOAPExceptionImpl: Bad response: (403Forbidden
HTTP JVM:  at com.sun.xml.internal.messaging.saaj.client.p2p.HttpSOAPConnection.call(HttpSOAPConnection.java:160)

This proves that the certificate was never sent to the WebService provider.

 

I need to call the agent from web using a ajax call

A. I have tried calling the "WSAgent" from another agent (ajax/url) using runonserver. -> "(403Forbidden"

B. I have tried using the built in "WebServiceConsumer" design element in Domino Designer, but that always raises the "(403Forbidden" error regardles of how I run the agent.

 

What am I doing wrong?


~Cheryl Opfreetherader
Mar 17, 2014, 12:37 PM
24 Posts
Related SPRs.

Discussed this offline, but for anyone else reading the forums. 

Currently Domino web services don't support the client authentication mechanism. Related SPRs (in case anyone needs to subscribe to an APAR). 

SODY9H6BTM - Relates to Client Authentication using the SOAP classes in Domino.

SODY9GJDBB - Relates to Client Authentication using Web Services (ie. import WSDL) in Domino. 

Using the Apache Axis third party jars should act as a work around. 

 

 


This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal