How to generate web svc data control from WSDL in 10.1.3 to secure web svc

Question

When I try to connect to web service via https, I get the error:
WARNING: Unable to connect to URL: https://remove.site.com/service
java.security.PrivilegedActionException: javax.xml.soap.SOAPException:
Message send failed: javax.net.ssl.SSLException: SSL handshake failed:
X509CertChainIncompleteErr Exceptionjava.rmi.RemoteException: ; nested exception is: HTTP transport error: javax.xml.soap.SOAPException:
java.security.PrivilegedActionException: javax.xml.soap.SOAPException:
Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
Process exited with exit code 0.
There does appear to be this dependency on Oracle Wallet, which I saw when I set:
System.setProperty("HTTPClient.log.level","1");
which showed Using Wallet:
and nothing after it.
AFTER I set:
System.setProperty("javax.net.ssl.Keystore", "f:\ewallet.p12");
System.setProperty("javax.net.ssl.KeyStorePassword","mywallet12");
I saw the "wallet" being used, but still ended up with the same error. I'm only trying to use the "test client" that the web service "generate web service proxy" produces.
The stack trace was:
java.rmi.RemoteException: ; nested exception is:
     HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
     at model.runtime.ProcessOrderBinding_Stub.processOrder(ProcessOrderBinding_Stub.java:95)
     at model.ProcessOrderPortClient.processOrder(ProcessOrderPortClient.java:177)
     at model.ProcessOrderPortClient.main(ProcessOrderPortClient.java:143)
Caused by: HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
     at oracle.j2ee.ws.client.http.HttpClientTransport.invokeImpl(HttpClientTransport.java:144)
     at oracle.j2ee.ws.client.http.HttpClientTransport.invoke(HttpClientTransport.java:120)
     at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:169)
     at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:110)
     at model.runtime.ProcessOrderBinding_Stub.processOrder(ProcessOrderBinding_Stub.java:78)
     ... 2 moreIronically, the same certificates that I loaded into the java keystore using Keytool and 10.1.2 connect to the same service without an error, using the notes as described here:
http://andrej.racchvs.com/archives/2004/04/
and
http://radio.weblogs.com/0132036/2004/02/13.html
When I created the data control for the WSDL in 10.1.2 (jdev), I didn't end up with as many files and only needed to set two system properties, and change the following lines to use Apache SOAP and I could invoke the web service as a data control as well:
1. references to OracleSOAPHTTPConnection changed to:
SOAPHTTPConnection
// import oracle.soap.transport.http.OracleSOAPHTTPConnection;
import org.apache.soap.transport.http.SOAPHTTPConnection;
2. comment out:
setTransportProperties
getTransportProperties
How can you connect to a remote web service using HTTPS with JDeveloper 10g and use the Oracle wallet?
Can someone provide specific steps to get it working based on having a WSDL file to start with?
Thanks!

Answer 1

Hello,
I have the same problem. I am trying to consume a CRM On Demand's Web Service from JDeveloper 10 g (version 10.1.3).
The main method from my Client is:
System.setProperty("HTTPClient.log.level","1");
System.setProperty("javax.net.ssl.Keystore", "C:\\jdevstudio1013\\jdk\\jre\\lib\\security");
System.setProperty("javax.net.ssl.KeyStorePassword",PASSWORD_KEYSTORE);
crmod.DefaultClient myPort = new crmod.DefaultClient();
ListOfContact list= new ListOfContact();
ListOfContact outList= new ListOfContact();
Contact[] contacts=new Contact[2];
Contact contact=new Contact();
// Login WS (HTTPS)
idSesionFull=conexionWS_CRM.logon(constantes.URL,constantes.USER,constantes.PASSWORD);
System.setProperty("javax.xml.rpc.service.endpoint.address", URL);
System.setProperty("javax.xml.rpc.security.auth.username", USER);
System.setProperty("javax.xml.rpc.security.auth.password", PASSWORD);
System.setProperty("javax.xml.ws.BindingProvider.ENDPOINT_ADDRESS_PROPERTY", URL);
// Add contacts
for (int i = 0; i < contacts.length; i++) {
contact.setContactId("WSCRM"+i);
contact.setContactFirstName("JDeveloper"+i);
contact.setContactLastName("prove"+i);
contact.setCellularPhone("77777777"+i);
contact.setExternalSystemId("1234"+i);
contacts=contact;
list.setContact(contacts);
outList=myPort.contactInsert(list,"OFF");
Contact[] results = new Contact[2];
Contact result = new Contact();
for (int i = 0; i < contacts.length; i++) {
results=outList.getContact();
System.out.println("Add contact with ID:"+results[i].getContactId()+" nom:"+results[i].getContactFirstName());
// Logout WS (HTTPS)
conexionWS_CRM.logoff(constantes.URL, idSesion);
} catch (Exception ex) {
System.out.println("error: "+ex);
ex.printStackTrace();
conexionWS_CRM.logoff(constantes.URL, idSesion);
The JDeveloper's log is:
LOGIN OK!!
sessionString:JSESSIONID=8d928b0b231c911e83d79ff74b9eaa7795b54d784b1b.e3iRbxmNaNb0ahqLa34LbhiMe0; path=/Services; secure URL:https://secure-ausomxgfa.crmondemand.com/Services
System.setProperty("HTTPClient.log.level","1"), print the following:
{Thread-10} [0:50:39.15] Version: Oracle HTTPClient Version 10h
{Thread-10} [0:50:39.46] Conn: Nagle's Algorithm is disabled
{Thread-10} [0:50:39.46] Conn: Setting Socket Idle Timeout to 10 seconds
{Thread-10} [0:50:39.46] Conn: Setting Maximum Authorization retries to 4
{Thread-10} [0:50:39.62] Conn: added module HTTPClient.RetryModule
{Thread-10} [0:50:39.93] Conn: added module HTTPClient.CookieModule
{Thread-10} [0:50:39.93] Conn: added module HTTPClient.RedirectionModule
{Thread-10} [0:50:39.93] Conn: added module HTTPClient.AuthorizationModule
{Thread-10} [0:50:39.93] Conn: added module HTTPClient.DefaultModule
{Thread-10} [0:50:39.109] Conn: added module HTTPClient.TransferEncodingModule
{Thread-10} [0:50:39.109] Conn: added module HTTPClient.ContentMD5Module
{Thread-10} [0:50:39.125] Conn: added module HTTPClient.ContentEncodingModule
{Thread-10} [0:50:39.156] Conn: chunking set to true
{Thread-10} [0:50:39.156] Conn: chunk size set to 4.096
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Setting request method: POST
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Setting request property: Content-type : application/x-www-form-urlencoded
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) creating output stream
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Setting request property: SOAPAction : "document/urn:crmondemand/ws/contact/10/2004:ContactInsert"
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Setting request property: Content-Type : text/xml; charset=UTF-8
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Setting request property: Content-Length : 1173
{Thread-10} [0:50:39.171] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Connecting ...
{Thread-10} [0:50:39.218] Conn: Creating Socket: secure-ausomxgfa.crmondemand.com:443
{Thread-10} [0:50:39.453] Conn: using SSL version Oracle
{Thread-10} [0:50:39.515] Using wallet:
{Thread-10} [0:50:39.796] Conn:
{Thread-10} [0:50:39.796] Conn: Retrying request
{Thread-10} [0:50:39.796] Conn: Creating Socket: secure-ausomxgfa.crmondemand.com:443
{Thread-10} [0:50:40.31] Using wallet:
{Thread-10} [0:50:40.265] Conn:
{Thread-10} [0:50:40.265] Conn: Retrying request
{Thread-10} [0:50:40.265] Conn: Creating Socket: secure-ausomxgfa.crmondemand.com:443
{Thread-10} [0:50:40.500] Using wallet:
{Thread-10} [0:50:40.734] Conn:
{Thread-10} [0:50:40.734] URLC: (https:secure-ausomxgfa.crmondemand.com:443) Disconnecting ...
Unable to connect to URL: https://secure-ausomxgfa.crmondemand.com/Services/Integration due to java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
error: java.rmi.RemoteException: ; nested exception is:
     HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
java.rmi.RemoteException: ; nested exception is:
     HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
     at crmod.runtime.Default_Binding_Stub.contactInsert(Default_Binding_Stub.java:506)
     at crmod.DefaultClient.contactInsert(DefaultClient.java:210)
     at crmod.DefaultClient.main(DefaultClient.java:138)
Caused by: HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
     at oracle.j2ee.ws.common.util.exception.JAXRPCExceptionBase.<init>(JAXRPCExceptionBase.java:93)
     at oracle.j2ee.ws.common.util.exception.JAXRPCExceptionBase.<init>(JAXRPCExceptionBase.java:89)
     at oracle.j2ee.ws.client.ClientTransportException.<init>(ClientTransportException.java:33)
     at oracle.j2ee.ws.client.http.HttpClientTransport.invokeImpl(HttpClientTransport.java:144)
     at oracle.j2ee.ws.client.http.HttpClientTransport.invoke(HttpClientTransport.java:121)
     at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:169)
     at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:111)
     at crmod.runtime.Default_Binding_Stub.contactInsert(Default_Binding_Stub.java:490)
     ... 2 more
Process exited with exit code 0.
And I am working without Proxy Server.
The steps I have done to obtain the keystore are:
1) Obtain the certificate from https://secure-ausomxgfa.crmondemand.com/Services/Integration and save as .cer
2) With this certificate I have generated the keystore:
C:\jdevstudio1013\jdk\jre\bin keytool -import -v -f DIR_CERTIFICATE_DOWNLOADED -keystore server.keystore -keypass PASS -storepass PASS_FROM_server.keystore
PASS=I have put an invented password
Any idea to solve the error? Is necessary a certificate with a keystore to connect HTTPS Web Service from JDeveloper 10g?
Thank you an regards.
Edited by: user2349857 on 05-nov-2009 4:18
Edited by: user2349857 on 05-nov-2009 4:25