users@jersey.java.net

[Jersey] Re: Securing WebService with glassfish ssl

From: Marek Potociar <marek.potociar_at_oracle.com>
Date: Thu, 14 Apr 2011 12:41:16 +0200

Hello,
Your problem does not seem to be related to Jersey at all. As Pavel already advised you in your previous thread, please
kindly post such questions at users_at_glassfish.java.net forum.

Thanks,
Marek

On 04/14/2011 12:27 PM, steben wrote:
> Hi,
> I try to secure my web service with glassfish ssl
> so I created the server and client certificate, and I trusted the both
> certificates with selfsigned certificate of glassfish,
> Next I added certificate Realm into Admin console of glassfish, the I add
> the definition of security into file configuration web.xml and sun-web.xml
> Here is it the web.xml
>
>
> Protected resource
> /*
> GET
>
>
>
>
>
> 10.0.2.2
>
>
>
>
>
> CONFIDENTIAL
>
>
>
>
>
> CLIENT-CERT
>
> certificate
>
>
> 10.0.2.2
>
> and sun-web.xml:
>
>
> 10.0.2.2
> Users
> the role name (10.0.2.2) match with CN of client certificate that match to
> android client application
>
>
> Now when I try to run the web service it gives me this exception(
> ssl_error_renegotiation_not_allowed)
>
> here the commands that I used to create a server and client certificates
>
> generate a new certificate in the keystore file, keystore.jks of glassfish
>
> keytool -genkey -alias Server -keyalg RSA -keypass pwd -storepass changeit
> -keystore keystore.jks
>
> export the generated certificate to a server.cer
>
>> keytool -export -alias Server -storepass changeit -file server.cer
> -keystore keystore.jks
> keytool -import -v -trustcacerts -alias keyAlias -file server.cer -keystore
> cacerts.jks -keypass changeit -storepass changeit
>
>
> --
> View this message in context: http://jersey.576304.n2.nabble.com/Securing-WebService-with-glassfish-ssl-tp6272243p6272243.html
> Sent from the Jersey mailing list archive at Nabble.com.