Java client calling ssl web service on WAS7

[vik ar]

Hi. I am trying to develop a simple standalaone java app which makes a call to a web service secured by ssl on WAS7. Initially I was getting the exception java.lang.ClassNotFoundException: com.ibm.websphere.ssl.protocol.SSLSocketFactory. After following advice here I added following two lines of code to my app

Security.setProperty("ssl.SocketFactory.provider", "com.ibm.jsse2.SSLSocketFactoryImpl");
Security.setProperty("ssl.ServerSocketFactory.provider", "com.ibm.jsse2.SSLServerSocketFactoryImpl");

Then i got the exception

 javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.g: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not 
build a valid CertPath.; internal cause is: 
	java.security.cert.CertPathValidatorException: The certificate issued by CN=AAA-SRV-98-247.uk.cust.xxx.com, OU=Root Certificate, OU=AAA-SRV-98-247Node01Cell, OU=AAA-SRV-98-247Node01, O=IBM, C=US is not trusted; internal cause is: 
	java.security.cert.CertPathValidatorException: Certificate chaining error  

I then created a self signed certificate for the WAS7 on which the web service is deployed using ikeyman.bat as specified here and added the following line of code to my app to point to the certificate:

 System.setProperty("javax.net.ssl.trustStore","c:/keys/cert.der");   

I am now getting the exception:

 java.net.SocketException: java.io.IOException: Invalid keystore format
java.net.SocketException: java.io.IOException: Invalid keystore format

	at com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.tryWithMex(RuntimeWSDLParser.java:158)
	at com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.parse(RuntimeWSDLParser.java:134)
	at com.sun.xml.internal.ws.client.WSServiceDelegate.parseWSDL(WSServiceDelegate.java:227)
	at com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:190)
	at com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(WSServiceDelegate.java:160)
	at com.sun.xml.internal.ws.spi.ProviderImpl.createServiceDelegate(ProviderImpl.java:92)
	at javax.xml.ws.Service.<init>(Service.java:67)
	at javax.xml.ws.Service.create(Service.java:691)   

Any ideas where I am going wrong?

[vik ar]

I have changed my client as follows (note - client and server are on same host)

System.setProperty("javax.net.ssl.trustStore","C:/IBM/Websphere/Appserver/java/jre/lib/security/cacerts");
System.setProperty("javax.net.ssl.trustStorePassword","changeit");

Now I am getting the same issue as before - The certificate issued by ... is not trusted?

[vik ar]

solution here: http://www.ibm.com/developerworks/forums/thread.jspa?messageID=14253079