OFBiz › OFBiz - User

RMI problem

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

6 messages Options

Stefan Selariu

RMI problem

I'm getting a "No trusted certificate found" exception when I'm trying
to invoke an ofbiz service.

The jsse.properties is set correctly to point to the ofbizrmi.jks

I followed the instructions written in the ExampleRemoteClient javadoc.
Perhaps I'm missing something.

What could be the problem?

Another unrelated question...
Why does jsse.properties contain refences to ofbiztrust.jks and
ofbizcerts.jks? These files are not available in the trunk

Stefan Selariu

Re: RMI problem

The exception source:
org.ofbiz.base.util.MultiTrustManager.checkServerTrusted(MultiTrustManager.java:70)

On Mon, 2007-08-13 at 16:20 +0300, Stefan Selariu wrote:

> I'm getting a "No trusted certificate found" exception when I'm trying
> to invoke an ofbiz service.
>
> The jsse.properties is set correctly to point to the ofbizrmi.jks
>
> I followed the instructions written in the ExampleRemoteClient javadoc.
> Perhaps I'm missing something.
>
> What could be the problem?
>
> Another unrelated question...
> Why does jsse.properties contain refences to ofbiztrust.jks and
> ofbizcerts.jks? These files are not available in the trunk
>

Scott Gray

Re: RMI problem

Hi Stefan

If you just want to get the example working and aren't too worried about
security at this stage, then this link will show you how to connect without
certs:
http://ofbizwiki.go-integral.com/Wiki.jsp?page=UsingNonSSLRMI

Regards
Scott

On 14/08/07, Stefan Selariu <[hidden email]> wrote:

>
>
> The exception source:
> org.ofbiz.base.util.MultiTrustManager.checkServerTrusted(
> MultiTrustManager.java:70)
>
> On Mon, 2007-08-13 at 16:20 +0300, Stefan Selariu wrote:
> > I'm getting a "No trusted certificate found" exception when I'm trying
> > to invoke an ofbiz service.
> >
> > The jsse.properties is set correctly to point to the ofbizrmi.jks
> >
> > I followed the instructions written in the ExampleRemoteClient javadoc.
> > Perhaps I'm missing something.
> >
> > What could be the problem?
> >
> > Another unrelated question...
> > Why does jsse.properties contain refences to ofbiztrust.jks and
> > ofbizcerts.jks? These files are not available in the trunk
> >
>
>

Stefan Selariu

Re: RMI problem

Hi Scott

Thanks for the link.
Sadly it doesn't work since the required classes
(CompressionClientSocketFactory and CompressionServerSocketFactory) are
gone from the trunk.

Since my project requires an secure application I must solvbe this
problem.
I don't think the problem comes from ofbizrmi.jks since this one is
valid until 2017.

Best regards,
Stefan

On Tue, 2007-08-14 at 17:47 +1200, Scott Gray wrote:

> Hi Stefan
>
> If you just want to get the example working and aren't too worried about
> security at this stage, then this link will show you how to connect without
> certs:
> http://ofbizwiki.go-integral.com/Wiki.jsp?page=UsingNonSSLRMI
>
> Regards
> Scott
>
> On 14/08/07, Stefan Selariu <[hidden email]> wrote:
> >
> >
> > The exception source:
> > org.ofbiz.base.util.MultiTrustManager.checkServerTrusted(
> > MultiTrustManager.java:70)
> >
> > On Mon, 2007-08-13 at 16:20 +0300, Stefan Selariu wrote:
> > > I'm getting a "No trusted certificate found" exception when I'm trying
> > > to invoke an ofbiz service.
> > >
> > > The jsse.properties is set correctly to point to the ofbizrmi.jks
> > >
> > > I followed the instructions written in the ExampleRemoteClient javadoc.
> > > Perhaps I'm missing something.
> > >
> > > What could be the problem?
> > >
> > > Another unrelated question...
> > > Why does jsse.properties contain refences to ofbiztrust.jks and
> > > ofbizcerts.jks? These files are not available in the trunk
> > >
> >
> >

Scott Gray

Re: RMI problem

Ah thats right I think they were removed because of licensing concerns.
Sorry I really can't offer much assistance on the certs. You could try this
thread and nabble in general:
http://www.nabble.com/forum/ViewPost.jtp?post=5236855&framed=y

Regards
Scott

On 14/08/07, Stefan Selariu <[hidden email]> wrote:

>
> Hi Scott
>
> Thanks for the link.
> Sadly it doesn't work since the required classes
> (CompressionClientSocketFactory and CompressionServerSocketFactory) are
> gone from the trunk.
>
> Since my project requires an secure application I must solvbe this
> problem.
> I don't think the problem comes from ofbizrmi.jks since this one is
> valid until 2017.
>
> Best regards,
> Stefan
>
> On Tue, 2007-08-14 at 17:47 +1200, Scott Gray wrote:
> > Hi Stefan
> >
> > If you just want to get the example working and aren't too worried about
> > security at this stage, then this link will show you how to connect
> without
> > certs:
> > http://ofbizwiki.go-integral.com/Wiki.jsp?page=UsingNonSSLRMI
> >
> > Regards
> > Scott
> >
> > On 14/08/07, Stefan Selariu <[hidden email]> wrote:
> > >
> > >
> > > The exception source:
> > > org.ofbiz.base.util.MultiTrustManager.checkServerTrusted(
> > > MultiTrustManager.java:70)
> > >
> > > On Mon, 2007-08-13 at 16:20 +0300, Stefan Selariu wrote:
> > > > I'm getting a "No trusted certificate found" exception when I'm
> trying
> > > > to invoke an ofbiz service.
> > > >
> > > > The jsse.properties is set correctly to point to the ofbizrmi.jks
> > > >
> > > > I followed the instructions written in the ExampleRemoteClient
> javadoc.
> > > > Perhaps I'm missing something.
> > > >
> > > > What could be the problem?
> > > >
> > > > Another unrelated question...
> > > > Why does jsse.properties contain refences to ofbiztrust.jks and
> > > > ofbizcerts.jks? These files are not available in the trunk
> > > >
> > >
> > >
>
>

Brett

Re: RMI problem

In reply to this post by Scott Gray

You will need to get a copy of the

org.ofbiz.service.rmi.socket.zip.CompressionClientSocketFactory
and
org.ofbiz.service.rmi.socket.zip.CompressionServerSocketFactory

from revision 451171 as they are no longer in the trunk due to license
issues if you want the example from the wiki to work.

Quote from svn:
"Author: jonesde
Date: Fri Sep 29 01:50:42 2006
New Revision: 451171

URL: http://svn.apache.org/viewvc?view=rev&rev=451171
Log:
Removed compression code from Sun that has a problematic license, people can
still grab and use this, but we just won't be distributing it as before;
this is not used by default; note that there may be other zip socket
implementations that we could put in place if this is important to someone,
but I don't know that anyone has looked into this yet"

Brett

On 8/13/07, Scott Gray <[hidden email]> wrote: