ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Unable to perform SOAP Request with SSL IBM IIB 10

Post new topic  Reply to topic
 Unable to perform SOAP Request with SSL IBM IIB 10 « View previous topic :: View next topic » 
Author Message
mhasan23
PostPosted: Tue Jul 02, 2019 4:10 am    Post subject: Unable to perform SOAP Request with SSL IBM IIB 10 Reply with quote

Novice

Joined: 12 Oct 2017
Posts: 20

Hello guys,

I am using IIB version 10. Our client expose a web service and their public certificate for consuming their web service. First I simply install the certificate on windows machine and use SOAPUI to invoke their APIs and it is working fine with single certificate provided by our client.

Now i am using the same web service in IBM IIB 10 with SOAP Request node; but it is not invoking and giving some SSL error;

Quote:
SocketException
File:CHARACTER:F:\build\slot3\S1000_P\src\WebServices\WSLibrary\ImbSocket.cpp
Line:INTEGER:1305
Function:CHARACTER:ImbSocketJNIManager::handleGeneralJavaException
Type:CHARACTER:
Name:CHARACTER:
Label:CHARACTER:
Catalog:CHARACTER:BIPmsgs
Severity:INTEGER:3
Number:INTEGER:3165
Text:CHARACTER:An error occurred whilst performing an SSL socket operation
Insert
Type:INTEGER:5
Text:CHARACTER:connect
Insert
Type:INTEGER:5
Text:CHARACTER:javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No X509TrustManager implementation available


I have already setup trustore and keystore with single certificate and set on Integration Node. We have the same case with our other clients but in that case public / private certificate of both parties are used and works fine. I am badly stuck can you please help me out, how I can do it with single client certificate.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Tue Jul 02, 2019 4:43 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

You are specifying the SOAP request node. By default it will use the integration server's PKI and not the Integration node wide PKI.

You might want to look at the output of
Code:
mqsireportproperties INODE -e ISERVER -o ExecutionGroup -r


Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
mhasan23
PostPosted: Tue Jul 02, 2019 4:55 am    Post subject: Reply with quote

Novice

Joined: 12 Oct 2017
Posts: 20

@fjb_saper I got the following response

Quote:
C:\Program Files\IBM\IIB\10.0.0.15>mqsireportproperties SoneriUbps -e UBPS -o ExecutionGroup -r

ExecutionGroup
uuid='6e0ed0d4-87eb-4901-b6b2-8e0b9f7839f0'
userTraceLevel='none'
traceLevel='none'
userTraceFilter='none'
traceFilter='none'
label='UBPS'
unnamedUserTraceLevel='none'
unnamedTraceLevel='none'
processorArchitecture='64'
consoleMode='off'
traceNodeLevel='on'
activeUserExitList=''
inactiveUserExitList=''
shortDesc=''
longDesc=''
injectionMode='Disabled'
httpNodesUseEmbeddedListener='false'
soapNodesUseEmbeddedListener='true'
threadLocalProxyNameManagers='false'
failedMessageWaitTime='1000'

BIP8071I: Successful command completion.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Tue Jul 02, 2019 5:07 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

This is the important part in your output:
Code:
soapNodesUseEmbeddedListener='true'

Now set up your PKI at the Integration Server Level
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
mhasan23
PostPosted: Tue Jul 02, 2019 5:21 am    Post subject: Reply with quote

Novice

Joined: 12 Oct 2017
Posts: 20

Thanks for your prompt response. Can you please guide me how to setup PKI.
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Jul 02, 2019 6:00 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

mhasan23 wrote:
Thanks for your prompt response. Can you please guide me how to setup PKI.


By reading the contact admin documentation, such as this.

You sound like you've done step 1. Now you need to do step 2. And step 3.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Unable to perform SOAP Request with SSL IBM IIB 10
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.