Callout Using https Error

Question

Greetings:
We have a 10.1.0.4 Standard DB with dbwsclient.jar loaded. We have a web service callout that works well using http. However, when we try to use https (which is a requirement) we get an error:
ORA-29532: Java call terminated by uncaught Java exception:
java.rmi.RemoteException:
java.rmi.RemoteException:HTTP transport error: javax.xml.soap.SOAPException:
java.security.PrivilegedActionException: javax.xml.soap.SOAPException:
Message send failed: https: null; nested exception is:
[the same as above]
This smells like a permission problem but I am executing that as SYS and I can't identify a specific permission problem.
In addition to the error, I am concerned about the need to install the self-assigned certificate and CA certificate of the WS because we don't have a Wallet Manager for the server, which looks to be a feature of Enterprise.
Do we have SSL support loaded into the DB already?
Can anyone provide advice about how to callout using https?
Thanks!... Rick

Answer 1

I got this to work. A tip of the hat to quwang for the assistance.
First, I find it very helpful to build a test case and execute that outside the DB. For example...
public static void main(String[] args) {
     try {
          InterfaceServiceSoapClientJPub.setEndpoint("https://xxx");
          String status = InterfaceServiceSoapClientJPub.helloWorld();
          System.out.println(status);
This provides a meaningful error message that the host is not trusted.
Next, I created a keystore like this...
keytool -import -file myCA.cer -keystore keystore -storepass myPassword -alias myHost
Once this works outside the DB, we are ready for the next step.
On Windows, create a backup of db_1\javavm\lib\security\cacerts
Put keystore there, named cacerts
RESTART the DB
(This is what I did, not necessarily the best thing to do.)
In the PL/SQL that calls the Java function, be sure to set the endpoint before making the call. This is necessary because the https endpoint installed by JPub is munged up. It will look like http://https://myhost. You can have a look at what's in there with getEndpoint().
Thanks again!... Rick