| Author |
Message
|
| mhasan23 |
 Posted: Tue Jul 02, 2019 4:10 am Post subject: Unable to perform SOAP Request with SSL IBM IIB 10 |
 |
|
Novice
Joined: 12 Oct 2017
Posts: 20
|
Hello guys,
I am using IIB version 10. Our client expose a web service and their public certificate for consuming their web service. First I simply install the certificate on windows machine and use SOAPUI to invoke their APIs and it is working fine with single certificate provided by our client.
Now i am using the same web service in IBM IIB 10 with SOAP Request node; but it is not invoking and giving some SSL error;
| Quote: |
SocketException
File:CHARACTER:F:\build\slot3\S1000_P\src\WebServices\WSLibrary\ImbSocket.cpp
Line:INTEGER:1305
Function:CHARACTER:ImbSocketJNIManager::handleGeneralJavaException
Type:CHARACTER:
Name:CHARACTER:
Label:CHARACTER:
Catalog:CHARACTER:BIPmsgs
Severity:INTEGER:3
Number:INTEGER:3165
Text:CHARACTER:An error occurred whilst performing an SSL socket operation
Insert
Type:INTEGER:5
Text:CHARACTER:connect
Insert
Type:INTEGER:5
Text:CHARACTER:javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No X509TrustManager implementation available |
I have already setup trustore and keystore with single certificate and set on Integration Node. We have the same case with our other clients but in that case public / private certificate of both parties are used and works fine. I am badly stuck can you please help me out, how I can do it with single client certificate.  |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Jul 02, 2019 4:43 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
You are specifying the SOAP request node. By default it will use the integration server's PKI and not the Integration node wide PKI.
You might want to look at the output of
| Code: |
| mqsireportproperties INODE -e ISERVER -o ExecutionGroup -r |
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| mhasan23 |
| Posted: Tue Jul 02, 2019 4:55 am Post subject: |
|
|
Novice
Joined: 12 Oct 2017
Posts: 20
|
@fjb_saper I got the following response
| Quote: |
C:\Program Files\IBM\IIB\10.0.0.15>mqsireportproperties SoneriUbps -e UBPS -o ExecutionGroup -r
ExecutionGroup
uuid='6e0ed0d4-87eb-4901-b6b2-8e0b9f7839f0'
userTraceLevel='none'
traceLevel='none'
userTraceFilter='none'
traceFilter='none'
label='UBPS'
unnamedUserTraceLevel='none'
unnamedTraceLevel='none'
processorArchitecture='64'
consoleMode='off'
traceNodeLevel='on'
activeUserExitList=''
inactiveUserExitList=''
shortDesc=''
longDesc=''
injectionMode='Disabled'
httpNodesUseEmbeddedListener='false'
soapNodesUseEmbeddedListener='true'
threadLocalProxyNameManagers='false'
failedMessageWaitTime='1000'
BIP8071I: Successful command completion. |
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Jul 02, 2019 5:07 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
This is the important part in your output:
| Code: |
| soapNodesUseEmbeddedListener='true' |
Now set up your PKI at the Integration Server Level
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| mhasan23 |
| Posted: Tue Jul 02, 2019 5:21 am Post subject: |
|
|
Novice
Joined: 12 Oct 2017
Posts: 20
|
| Thanks for your prompt response. Can you please guide me how to setup PKI. |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Jul 02, 2019 6:00 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mhasan23 wrote: |
| Thanks for your prompt response. Can you please guide me how to setup PKI. |
By reading the contact admin documentation, such as this.
You sound like you've done step 1. Now you need to do step 2. And step 3.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
