Post a reply

Write your message and submit

Options

Click in the dark area of the image to send your post.

Go back

Topic review (newest first)

pmarino70
2012-09-28 15:07:57

Hi Gabriel. Thanks for the response. Yes I realize that. Finally we discover that karaf use a different handshake sequence from Jboss 7. So we added this parameter to karaf line command in trun script:

-Dhttps.protocols=TLSv1

Now it works.

Regards

Pierluca

gusto2
2012-09-28 13:33:49

Hi Pierluca,

settings in the etc/org.ops4j.pax.web.cfg file are configuring the Karaf container as server side SSL endpoint, so how it will behave against HTTP(S) clients. I don't thing it has anything to do with tREST component, what is used as HTTP client. I will have a look at the component when having some time, but no promises sad

in theory - you could build a mediation proxy route (or a pure Camel route) with sslContextParametersRef defined ( http://camel.apache.org/http4.html ) to separate the authentication concern.

Gabriel

pmarino70
2012-09-27 12:34:25

I have same problem. I set my trust store how you indicated, but I get an exception:

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

My https client is a tRest component.

Any idea how to solve this?

Regards

Pierluca

gusto2
2012-06-01 10:36:48

Hi Isoto,

- keystores are in etc/keystores folder, create a new keystore with your keypair and the signed imported certificate
- edit etc/org.ops4j.pax.web.cfg to add:

Code:

org.osgi.service.http.port.secure=8443
org.osgi.service.http.secure.enabled=true
org.ops4j.pax.web.ssl.keystore=etc/keystores/test.jks
org.ops4j.pax.web.ssl.password=password
org.ops4j.pax.web.ssl.keypassword=password

and it should be running.

Carpe diem
        Gabriel

lsoto
2012-06-01 02:17:51

Hello All,

Does anyone know to install an SSL certificate in apache Karaf, so my clients can communicate to my Webservices usinh HTTPS?

I will get a certificate from a trsuted CA.

Regards and thanks for your replies.

Board footer

Powered by FluxBB