SSL enable web service proxy

Greenhorn

Posts: 1

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Dears,

I have a third party SSL enable web service. I generated the web service proxy client using Jdev 11G ( one version generated useing command line command). I have valid SSL certificate and test it openssl utility. When I run the client I got following SSL debug log and exception:

calling https://zantel.provisioning.blackberry.com:443/webservices/Provisioning
keyStore is : E:\Oracle\Middleware\jdk160_24\jre\bin\ONE.jks
keyStore type is : jks
keyStore provider is : 
init keystore
init keymanager of type SunX509
trustStore is: E:\Oracle\Middleware\jdk160_24\jre\bin\ONE.jks
trustStore type is : jks
trustStore provider is : 
init truststore
adding as trusted cert:
  Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x23456
  Valid from Tue May 21 10:00:00 PKST 2002 until Sat May 21 09:00:00 PKT 2022

adding as trusted cert:
  Subject: CN=GeoTrust SSL CA, O="GeoTrust, Inc.", C=US
  Issuer:  CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x236d0
  Valid from Sat Feb 20 03:39:26 PKT 2010 until Wed Feb 19 03:39:26 PKT 2020

trigger seeding of SecureRandom
done seeding SecureRandom
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
%% No cached client session
*** ClientHello, TLSv1
RandomCookie:  GMT: 1351258313 bytes = { 52, 186, 70, 66, 65, 186, 155, 196, 139, 185, 30, 122, 170, 172, 11, 99, 42, 143, 217, 193, 157, 79, 39, 201, 40, 135, 94, 176 }
Session ID:  {}
Cipher Suites: [SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
Compression Methods:  { 0 }
***
main, WRITE: TLSv1 Handshake, length = 75
main, WRITE: SSLv2 client hello message, length = 101
main, READ: TLSv1 Handshake, length = 42
*** ServerHello, TLSv1
RandomCookie:  GMT: -369569104 bytes = { 115, 133, 176, 156, 169, 251, 222, 48, 157, 121, 153, 178, 135, 155, 79, 37, 92, 119, 202, 105, 181, 195, 218, 165, 144, 222, 83, 104 }
Session ID:  {}
Cipher Suite: SSL_RSA_WITH_RC4_128_MD5
Compression Method: 0
***
Warning: No renegotiation indication extension in ServerHello
%% Created:  [Session-1, SSL_RSA_WITH_RC4_128_MD5]
** SSL_RSA_WITH_RC4_128_MD5
main, READ: TLSv1 Handshake, length = 2318
*** Certificate chain
chain [0] = [
[
  Version: V3
  Subject: CN=*.provisioning.blackberry.com, OU=IT, O=Research In Motion Limited, L=Waterloo, ST=Ontario, C=CA, SERIALNUMBER=d-0yTJmCAVt6wH0pg//DIEvI0UtDkhhP
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key:  Sun RSA public key, 2048 bits
  modulus: 22151546962157803223622062907729503165893779076566326076205851278842900721963267769693650462114327137879285063692130587598558000636189308747742496564549949466174974392074020037137543954180194351829367229987575984652154025605675713852879567852876087043206299692091230214376468334074556696669945987514973293559880161673169863447551549179572085361895422156620509549166377251851201322591380244632256068579216715013095836353864571140564912461583374826108215020762643127524481303730842364800601127525852193144037521980490802491487868728627172345771455574161280951573697866904845104339002600417726017101399733162697049061629
  public exponent: 65537
  Validity: [From: Wed Jan 09 11:07:07 PKT 2013,
               To: Mon Apr 13 19:15:08 PKT 2015]
  Issuer: CN=GeoTrust SSL CA, O="GeoTrust, Inc.", C=US
  SerialNumber: [    01ef40]

Certificate Extensions: 9
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: 1.3.6.1.5.5.7.48.1
   accessLocation: URIName: http://gtssl-ocsp.geotrust.com, 
   accessMethod: 1.3.6.1.5.5.7.48.2
   accessLocation: URIName: http://gtssl-aia.geotrust.com/gtssl.crt]
]

[2]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: *.provisioning.blackberry.com
]

[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 42 79 54 1B 61 CD 55 2B   3E 63 D5 3C 48 57 F5 9F  ByT.a.U+>c.<HW..
0010: FB 45 CE 4A                                        .E.J
]

]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 91 0F C8 65 CD CD 7E 3C   C4 01 9C 20 BF C8 04 3B  ...e...<... ...;
0010: 48 FA F5 D4                                        H...
]
]

[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.16.840.1.113733.1.7.54]
[PolicyQualifierInfo: [
  qualifierID: 1.3.6.1.5.5.7.2.1
  qualifier: 0000: 16 25 68 74 74 70 3A 2F   2F 77 77 77 2E 67 65 6F  .%http://www.geo
0010: 74 72 75 73 74 2E 63 6F   6D 2F 72 65 73 6F 75 72  trust.com/resour
0020: 63 65 73 2F 63 70 73                               ces/cps

]]  ]
]

[6]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:false
  PathLen: undefined
]

[7]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
  clientAuth
]

[8]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://gtssl-crl.geotrust.com/crls/gtssl.crl]
]]

[9]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
  Data_Encipherment
]

]
  Algorithm: [SHA1withRSA]
  Signature:
0000: 11 DB 1C 29 33 16 80 0D   5A BE 04 09 26 C8 40 EB  ...)3...Z...&.@.
0010: D3 74 62 F6 AF 15 5D 20   4B D2 72 1D 24 59 D1 76  .tb...] K.r.$Y.v
0020: 61 69 08 B4 6E 17 C4 72   0F 43 9D 07 99 1D 3C F7  ai..n..r.C....<.
0030: 9D 4D 35 36 C9 AB CD DA   A1 74 7D 55 70 AF 84 5F  .M56.....t.Up.._
0040: 4D A2 9C 2E 20 6F 6A 00   15 14 96 2E EB 84 14 7C  M... oj.........
0050: 16 B3 3A EB 59 98 25 81   AC 4C 11 12 1C 9D 05 2F  ..:.Y.%..L...../
0060: 71 BD 05 19 02 F6 D2 DD   AE A1 A2 57 AA 54 F4 9A  q..........W.T..
0070: 96 2F B8 0A 4A EA 2E AB   B2 03 4B 96 F8 46 A5 7E  ./..J.....K..F..
0080: 0C 83 74 E2 CF 3D FF 42   03 C4 1D D6 27 9A A7 59  ..t..=.B....'..Y
0090: 48 B8 F3 66 7D 9E 82 F0   AE 27 D0 93 0F 63 CE 0A  H..f.....'...c..
00A0: 01 3E 92 CA 41 F0 02 D5   43 3B 98 6F 9A FE 14 44  .>..A...C;.o...D
00B0: C0 11 27 B6 33 91 8F 34   49 8D AC A0 A1 4A 90 BA  ..'.3..4I....J..
00C0: 31 B3 75 ED DA 30 14 B0   AB 5A F0 E1 A5 34 3C 7A  1.u..0...Z...4<z
00D0: 87 6C A9 A3 D6 8C A0 42   18 54 6B B2 91 4B 43 33  .l.....B.Tk..KC3
00E0: 3D 8A B4 2F FD 1B 90 DA   80 D8 26 31 F3 B8 11 99  =../......&1....
00F0: DA D0 D1 C9 18 B2 CF 41   AA 73 44 B7 33 74 33 59  .......A.sD.3t3Y

]
chain [1] = [
[
  Version: V3
  Subject: CN=GeoTrust SSL CA, O="GeoTrust, Inc.", C=US
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key:  Sun RSA public key, 2048 bits
  modulus: 18266832123037187513359825670631574271062891508676817150960694154777161153850291581365860336716519069980228972100983936259789847600546560614024599981220879607140326795926727110971188832419422252647723962904919257751779734942990814212542232782021417175315758855348974380519866919662522340908988916795230365830207210736685879211477808947726760475837427925392275592625507991949115680173899599468155469453594580884504171908704533866844904376683069413753325132203461555269261468861650504034614700711791652923877686256665785473546569387468476960640158931122611458855927846736791391477597342841573950982596073040411781545247
  public exponent: 65537
  Validity: [From: Sat Feb 20 03:39:26 PKT 2010,
               To: Wed Feb 19 03:39:26 PKT 2020]
  Issuer: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  SerialNumber: [    0236d0]

Certificate Extensions: 6
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 42 79 54 1B 61 CD 55 2B   3E 63 D5 3C 48 57 F5 9F  ByT.a.U+>c.<HW..
0010: FB 45 CE 4A                                        .E.J
]
]

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: C0 7A 98 68 8D 89 FB AB   05 64 0C 11 7D AA 7D 65  .z.h.....d.....e
0010: B8 CA CC 4E                                        ...N
]

]

[3]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.geotrust.com/crls/gtglobal.crl]
]]

[4]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

[5]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: 1.3.6.1.5.5.7.48.1
   accessLocation: URIName: http://ocsp.geotrust.com]
]

[6]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:0
]

]
  Algorithm: [SHA1withRSA]
  Signature:
0000: D4 EF 53 84 E8 1A BD A1   8B 04 C0 A9 F5 5F A1 10  ..S.........._..
0010: 78 45 5D B2 57 6A 4E 24   CB 65 4E 31 97 91 9A D4  xE].WjN$.eN1....
0020: 24 F8 E2 27 66 70 31 9C   C1 62 54 06 E7 97 1D 3A  $..'fp1..bT....:
0030: 9A C0 A4 29 48 0A AF 24   C7 A8 C4 9A 54 C1 7C 4C  ...)H..$....T..L
0040: 78 4C 2B 68 2C 5D 17 A6   54 78 4C 46 E2 80 C3 1F  xL+h,]..TxLF....
0050: 38 71 12 D2 D7 53 E3 54   85 50 B8 02 CB EE 63 3A  8q...S.T.P....c:
0060: F8 56 89 4D 55 BB 2E C0   C8 18 77 86 31 0B 0B 70  .V.MU.....w.1..p
0070: F0 7E 35 83 A4 2A 13 64   56 67 34 5D 16 5F 73 AC  ..5..*.dVg4]._s.
0080: 7B 06 24 DA 4F 50 6D 2A   AB D0 4D 53 41 C2 8E BB  ..$.OPm*..MSA...
0090: 71 03 49 29 86 18 CF 21   42 4C 74 62 51 15 C5 6F  q.I)...!BLtbQ..o
00A0: A8 EF C4 27 E5 1B 33 DD   5A 88 D7 7F 12 D1 A7 61  ...'..3.Z......a
00B0: 25 1F D5 E0 DC 1D CF 1A   10 D8 A0 CB 5F 8C FA 0C  %..........._...
00C0: E5 BF 71 FF E5 5D 44 1D   A6 3E 87 47 FA 1A 4E 83  ..q..]D..>.G..N.
00D0: 83 12 3F 88 66 95 98 79   9A 85 EB 02 47 CD 25 E3  ..?.f..y....G.%.
00E0: F2 06 04 4E 99 CA 5C A0   6E 7A BB DD A3 90 1A 45  ...N..\.nz.....E
00F0: 33 EF BF 3E D2 04 C4 B6   E0 2A 85 65 41 3E 10 D4  3..>.....*.eA>..

]
***
Found trusted certificate:
[
[
  Version: V3
  Subject: CN=GeoTrust SSL CA, O="GeoTrust, Inc.", C=US
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

]

[3]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.geotrust.com/crls/gtglobal.crl]
]]

[4]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  Key_CertSign
  Crl_Sign
]

[5]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: 1.3.6.1.5.5.7.48.1
   accessLocation: URIName: http://ocsp.geotrust.com]
]

[6]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:0
]

]
main, READ: TLSv1 Handshake, length = 4
*** ServerHelloDone
*** ClientKeyExchange, RSA PreMasterSecret, TLSv1
main, WRITE: TLSv1 Handshake, length = 262
SESSION KEYGEN:
PreMaster Secret:
0000: 03 01 AE 0F B8 02 EE 3C   C3 C5 80 21 55 A5 56 19  .......<...!U.V.
0010: CB 16 4D AD 76 82 8C 50   BA 35 72 E3 C3 31 CD 07  ..M.v..P.5r..1..
0020: 07 EB 07 97 25 C7 C1 FA   5F 81 61 48 36 2B F5 43  ....%..._.aH6+.C
CONNECTION KEYGEN:
Client Nonce:
0000: 51 8B 91 C9 34 BA 46 42   41 BA 9B C4 8B B9 1E 7A  Q...4.FBA......z
0010: AA AC 0B 63 2A 8F D9 C1   9D 4F 27 C9 28 87 5E B0  ...c*....O'.(.^.
Server Nonce:
0000: EA F9 D3 B0 73 85 B0 9C   A9 FB DE 30 9D 79 99 B2  ....s......0.y..
0010: 87 9B 4F 25 5C 77 CA 69   B5 C3 DA A5 90 DE 53 68  ..O%\w.i......Sh
Master Secret:
0000: 74 94 39 96 C5 60 7B D4   41 37 36 12 89 36 92 2E  t.9..`..A76..6..
0010: C5 A1 32 E8 96 6F 21 F5   D4 67 EE 75 62 2C 95 EB  ..2..o!..g.ub,..
0020: B4 B4 7B 83 56 A7 74 58   13 AD C8 F8 FB 6D A6 87  ....V.tX.....m..
Client MAC write Secret:
0000: 7E EB 4C C4 E3 19 3A 34   7B FA A1 5F 16 4E B0 77  ..L...:4..._.N.w
Server MAC write Secret:
0000: 3C 90 4A DF 3C 3E E7 48   19 89 C4 7B C9 0F 3B 80  <.J.<>.H......;.
Client write key:
0000: A0 69 79 BB D2 C5 5B 2E   32 A3 77 3D AD A9 6B 75  .iy...[.2.w=..ku
Server write key:
0000: 91 EC 75 B7 B8 4F 49 7C   77 13 D8 E8 DE 9A BD 45  ..u..OI.w......E
... no IV used for this cipher
main, WRITE: TLSv1 Change Cipher Spec, length = 1
*** Finished
verify_data:  { 110, 197, 224, 19, 252, 241, 55, 157, 36, 13, 171, 178 }
***
main, WRITE: TLSv1 Handshake, length = 32
main, READ: TLSv1 Change Cipher Spec, length = 1
main, READ: TLSv1 Handshake, length = 32
*** Finished
verify_data:  { 21, 126, 72, 177, 208, 201, 9, 91, 157, 138, 93, 100 }
***
%% Didn't cache non-resumable client session: [Session-1, SSL_RSA_WITH_RC4_128_MD5]
main, WRITE: TLSv1 Application Data, length = 342
main, WRITE: TLSv1 Application Data, length = 568
main, READ: TLSv1 Application Data, length = 1865
main, called close()
main, called closeInternal(true)
WARNING: Unable to connect to URL: https://abc.provisioning.test.com:443//webservices//Provisioning due to java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
main, SEND TLSv1 ALERT:  warning, description = close_notify
main, WRITE: TLSv1 Alert, length = 18
main, called close()
main, called closeInternal(true)

THis exception after ward:

java.rmi.RemoteException: ; nested exception is: 
	HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
	at com.abc.webservices.provisioning.runtime.ProvisioningPort_Stub.submitreq(ProvisioningPort_Stub.java:108)
	at com.abc.webservices.provisioning.ProvisioningPortClient.submitreq(ProvisioningPortClient.java:61)
	at com.abc.webservices.provisioning.ProvisioningPortClient.main(ProvisioningPortClient.java:44)
Caused by: HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
	at oracle.j2ee.ws.client.http.HttpClientTransport.invokeImpl(HttpClientTransport.java:174)
	at oracle.j2ee.ws.client.http.HttpClientTransport.invoke(HttpClientTransport.java:150)
	at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:176)
	at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:113)
	at com.blackberry.webservices.provisioning.runtime.ProvisioningPort_Stub.submitreq(ProvisioningPort_Stub.java:84)
	... 2 more

Any help in this regard highly appreciated. I have done lot of googling , stackeflow, blogs and coderanch but unable to get through.

Consider Paul's rocket mass heater.