JWSDP 1.4 accepts only X509 v3 certificates?

Hi!
The sample keys and demos supplied with JWSDP 1.4 worked fine for me. I tried generating my own keys to use with SOAP encryption and I got the following exception:
java.rmi.RemoteException: Expected Version 3 Certificate, found Version 1; nested exception is:
com.sun.xml.wss.SecurityTokenException: Expected Version 3 Certificate, found Version 1
I checked keytool's doc and it says that it can only generate v1 certificates (it is able to handle v1 through v3).
Has anyone any suggestions as to what would be the easiest way to solve this (either by generating v3 certs easily or by forcing JWSDP to accept v1 certs)?
Rgs,
Panu

I'll answer to myself if anyone else encounters the same problem: JWSDP 1.4 (or WSS to be more specific) indeed requires X509 v3 certs and keytool does not generate that version.
One has to use other tools to generate them, for example openssl. After that Sun's pkcs12import is used to make them understood by Java environment.

Similar Messages

  • IPhone Mail app; IMAP; x509 client certificate?

    The title says it all really.
    I have an x509 client certificate happily installed in my iPhone's keychain. This certificate works correctly in Safari, allowing access to sites which demand it. When I try to collect mail from an IMAP server which also requires a client certificate, it doesn't work.
    As far as I can work out, the Mail app is not sending my client certificate when the server requests it to do so. Is this true? Is there a way to configure the Mail app to respond correctly to the server's client certificate request? Any pointers or information welcome!

    I think so.
    Actually I think I need to get the App Password for Mail on my phone. It generates the app password and I enter it into the password in the gmail setup for mail.
    The problem is that when I hit next on that page, I get the message:
    "my name" is already added" and I cannot proceed.
    Before doing this setup I deleted my gmail account by tapping the email address and hitting delete in the Mail, Contact and Calendars setup..
    but, there is something hiding in my iPhone that remembers my old gmail password (I guess) and doesn't let me proceed.
    If I enter my gmail iChain password I get the same thing.
    If i do this in airplane mode (no connection to google) i also get the same.
    I talked to an apple care person who had me reset all my settings... still the same thing.
    I am trying to avoid a gull reset of the iPhone, but that may be in the cards.
    Going to go to the apple store and ask there, but i am not hopeful.
    Barry

  • How to Make JTextField Accept Only Specific Numbers?

    Hello There
    I've made 3 JTexfields That accepts only Numbers
    But I Want To Make Them Accpets Numbers only from 1 to 12
    and if the number is greater than 12 they don't accept it?
    another Thing That I've Set Their Columns To 2 meaning that i want the user to enter only two numbers
    but yet the user can enter many numbers how would i restrict entering numbers to only two numbers?
    here's my code:
      import java.awt.*;
      import javax.swing.*;
      import javax.swing.text.*;
      public class ManyText extends JFrame{
           public static void main(String[]args){
           JTextField[ ] text = new JTextField[3];
           JButton button=new JButton("Press");
        for(int i = 0; i < text.length; i++)
         text[i] = new JTextField(3);
         for(int i = 0; i < text.length; i++){
         text.setColumns(2);     
    text[i].setDocument(new PlainDocument(){
    public void insertString(int offs, String str,
    AttributeSet a) throws BadLocationException{
    if("0123456789".indexOf(str) < 0)
    java.awt.Toolkit.getDefaultToolkit().beep();
    return;
    super.insertString(offs, str, a);
         JFrame f=new JFrame();
         f.setSize(200,200);
         f.setLayout(new FlowLayout());
         f.add(text[0]);
    f.add(text[1]);
    f.add(text[2]);     
         f.setVisible(true);     

    ejp wrote:
    Actually I would suggest you're using the wrong control. I would use a JComboBox or a JSpinner for this.I suggested he use a JSpinner 1-2 threads ago. Maybe if he hears it enough, he'll believe it.

  • How to create rewrite rule to accept only mail pass from antivirus server

    I want to set JES messaging 6.0 to accept only mail that scaned from antivirus server. If clients send direct to messaging server it will forward that mail to antivirus server. After mail was scaned it is sent to messaging server and messaging server accept it.
    How to create rewrite rule for this case?

    Please read this technical note, for setting up such a configuration:
    http://ims.balius.com/downloads/AlternateConversion.pdf
    Please note, this site contains some other very useful information for Messaging Server, but IE browsers are NOT supported. You must use some other browser.

  • Input should accept only alphabets(validation)

    Hi
    I have a input field with label EMPLOYEE NAME  where it should accept only alphabets  spacesand dot(.)For example(k.krishna rao).
    Thanks
    Krishna

    chkInput-->String
    2)then do the binding.
    3)create message in message pool
    MessageKey-->inputValidation
    MessageType-->error
    MessageText-->you have entered ,which is in not alphabet.
    Please enter valid .
    3)create Method and check for the input field
    and implement your method.
    your code may look like this.you can do your manipulation according to your requirement.
    public void chkInputField( java.lang.String chkInp)
    //@@begin CheckDate()
    IWDMessageManager msgmgr=wdComponentAPI.getMessageManager();
    Integer inInt =(Integer)wdContext.currentContextElement().getAttributeValue(chkInput);
    IWDAttributeInfo attinfo=wdContext.getNodeInfo().getAttribute(chkInput);
    for (i=0; i<chkInp.length; i++) {
    if (chkInp.charAt(i) == "." || chkInp.charAt(i) == "/")
    //show the error message
    msgmgr.reportContextAttributeMessage(wdContext.currentContextElement(),
    attinfo,
    IMessageMainComp.INPUT_INVALID,
    new Object[]{ chkInput},
    true);
    //@@end

  • MIGO/MIRO - possible? posting date accept only workdays

    Is possible to accept only workday dates in MIRO and MIGO for posting date?
    if any one knows please let me know how.
    thanks.

    Angelita,
    If that is the case, then the only way to achieve this would to be use an exit/BADI and do a validation on the posting date in the MIGO/MIRO header and display a warning/error message to the user as required.
    I think BADI MRM_HEADER_CHECK should work for the MIRO header validation. I am not too sure about MIGO - have an ABAPer check out BADI MB_MIGO_BADI.
    Hope this helps.
    H Narayan

  • IW32 - restriction or validation to accept only internal order from a plant

    HI team!!
    I´m needing your help
    Im working with Tcode IW32 when creating a maintenance order and we got through Goto / Settlement rule we can assign any internal order number.
    there is no restriction or validation to accept only internal order numbers from the corresponding plant, this condition may affect other entities
    How can I limit it?
    Thks & regards "

    In configuration, in settlement rule, restrict receiver other than internal order. In case if you want to have internal order as a receiver but restrict only some orders, you can do that using a user exit/badi at save.
    example user exit -IWO10009

  • Unable to install SSL Certificate - ADMIN4118: Only one server certificate can be installed at a time

    Hi,
    We are trying to install SSL certificate (Verisign Class 3) on iPlanet Web Server (version 7). However, at the final step we are getting the error "ADMIN4118: Only one server certificate can be installed at a time"
    We are following the below steps,
    Under "Server Certificates" tab,
         -> Click on "Install" button.
         -> On "Select Configuration" click on "Next" button.
         -> On "Select Tokens and Passwords", select default token as "internal" and click on "Next" button.
         -> On "Enter Certificate Data", select option as "Certficate File" and give path to the certificate file which is having .p7b extension
         -> On "Certificate Details" we are getting warning as "Duplicate Server Details Found" and it's by default using the existing certificate's nickname.
         -> On "Review" page after clicking "Finish" button, an error is displayed saying "ADMIN4118: Only one certificate server can be installed at a time"
    There are multiple sub-domains availble and the new certificate we want to install contains one more sub-domain.
    So, say currently the subdomains present are,
    1.abc.com
    2.abc.com
    so on...
    and now we are trying to install a SSL certificate having one more subdomain say 10.abc.com.
    Please let us know if you have solution to this problem.
    Thanks,
    Rajesh

    Hi Rajesh,
    That error is most commonly seen when you are trying to install a certificate chain into the Web Server.
    The chain should be installed using the "Certificate Authorities" tab per the following steps:
    1) Login to the Admin Console.
    2) Click Edit Configuration from Common Tasks > Configuration Tasks.
    3) Click the Certificates > Certificate Authorities tab from the Configurations page.
    4) Click the Install... tab from the Certificate Authorities (CAs) page.
    An Install CA Certificate Wizard opens. The wizard guides you through the settings available for installing a Certificate Chain. Select Certificate Chain when prompted for Certificate Type.
    You should then see the CA and intermediate certificate(s) listed in the security database.
    If you have access to MOS, more details can be found in the MOS KM Note:
       Oracle iPlanet Web Server - 'ADMIN4118: Only one server certificate can be installed at a time' When Installing Certificate Chain (Doc ID 1925025.1)
    regards
    Tracey

  • How to accept only 4 or less hex characters in string control

    Hi,
    I want to accept only up to 4 hex characters in a string control. I dont want to use "hex display" property.
    How is it possible? I have String control key down? event in event case, I tried it with regular expressions [0-9a-fA-F]{4} but then I have to accept left, right, delete, backspace, home keys as well.
    Solved!
    Go to Solution.

    I agree with Dennis that you seem to be making life difficult for yourself.  However, you did ask the equivalent (as I understand it) "How can I allow the user to type "1", "2", "Ctrl-A", "B", "Ctrl-C", "D" and get this recognized as the string "12BD".  If you really want to do this, here is one way (I was lazy and left the answer as an array of 4 1-character strings).  I use PlatMods to exclude having any "modification" key other than Shift down, convert the numeric Char into a string, then count acceptable Hex letters and conditionally add them to the output array, stopping when I have 4 characters. 
    Bob Schor

  • TS3276 I created 2 Gmail addresses. My Mac recognizes and accept only one name in the System Preferences

    I created 2 Gmail addresses. My Mac recognizes and accept only one name in the System Preferences.
    When I send a mail with one of the address, the recipient receives it with this address, however, if he replies, the incoming address will be the second one? ? ?

    I've never had a problem with multiple email addresses. My ISP's email account has multiple accounts and the same SMTP server, no problem.
    I can't speak for GMail as I only have one, and that is my spam email account, so I don't really care what it sends.
    I really don't understand your response.
    What was "reviewed" and what was "ok" about it?
    Their suggestion was to open a different session for each Gmail account.
    "Different session." What does that mean?
    Gmail is a very bizarre email server. It was designed to be web-based, but due to demand, they made it pseudo-compatible with POP and IMAP.
    If you move email out of the Inbox, Mail will reply using the "default" email account, not necessarily the one that was originally associated with the message. Being that Gmail doesn't really have mailboxes or folders, but has tags it calls "Labels," it may have something to do with that issue.

  • Restrict a textInput component to accept only numbers from 0 to 250

    I want to restrict a textInput component to accept only
    numbers from 0 to 250. I know I can use restrict to some degree but
    all I can do is restrict it to 0-9 and use maxChars to 3 which
    allows any number from 000-999.
    I believe I could use the TextEvent.TEXT_INPUT and then write
    some code that will convert that event's text (i.e. the text
    entered into textInput component before it is actually added to the
    textInput component's text value) such that I do not allow values
    greater than 250 but I'm not sure what that code would be. Does
    anyone know an easier way to do this?

    use the change event to monitor the input value and if it's
    greater than 250 (after typing the text property as a number),
    assign the text property to be "250".

  • Dataelement of data type char but accepts only integers

    Hi Experts,
    I have a scenario where quantity field in output is editable and the user wants the quantity field printed without thousand separator. If i take a char field and display the field is editable then user may mistakenly type a,bcd...z/ special characters which it should not capture. Is there any char data type data element which accepts only integers. Because after that i need to save that value in z database table quantity field.
    Please share your suggestions.

    I have a scenario where quantity field in output is editable and the user wants the quantity field printed without thousand separator.
    I'm a bit lost with your statement, as you consider changing the data type it sounds like you have control over the program and thus most likely also over the forms (assuming that printing means sending some output to a printer). In that case I'd first consider keeping the quantity field as is and change the output logic (e.g. print program or form) so that the group (thousands) separator doesn't appear for that quantity field (and refrain from changing the field definition). (Similarly if it's just concerning the output of a field on the screen then an appropriate output mask/template for that screen field should be the right way to go.)

  • Go Daddy UCC Certificate: "ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update"

    Hello,
    I have this issue regarding certificate chains while performing Outlook Anywhere connectivity test
    by Microsoft Remote Connectivity Analyzer:
    "ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled."
    Note: even if I got the error, Outlook Anywhere and
    ActiveSync services work fine.
    Environment:
    - Exchange 2007 with SP3
    - Go Daddy Multiple Domains UCC certificate (up to 5 Subject Alternative Names)
    I already read and followed instructions on this TechNet post
    Can I safely ignore this warning about the SSL cert? Using GoDaddy UCC cert but it is a little bit different by this case.
    So after an investigation I understand the issue above is related to SSL certificate
    Certification Path (see screenshots below).
    NO ERRORS on ExRCA checking
    Go Daddy Secure Certification Authority is under Intermediate Certification Authorities
    repository
    Go Daddy Class 2 Certification Authority is under Intermediate Certification Authorities
    repository
    Starfield Technologies (http://www.valicert.com)
    is under Trusted Root Certification Authorities repository
    ERROR on ExRCA checking
    Go Daddy Secure Certification Authority is under Intermediate Certification Authorities
    repository
    Go Daddy Class 2 Certification Authority is under Trusted Root Certification Authorities
    repository
    Can you add some useful information ?
    I'm opening a support ticket at Go Daddy; I hope they could me some positive feedbacks.
    Regards,
    Luca Fabbri
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Strange I have a feeling the exrca tool can't validate the godaddy class2 root authority due some older compability and wants to use the older original root authority valicert owned godaddy. Or when the exrca tool is validating the root CA it only has the
    goaddy class2 root ca that was issued by valicert and not the standalone cert when doing the comparision. I sent the question to MS and will let you know when I hear back.
    You can get rid of it
    https://certs.godaddy.com/anonymous/repository.seam
    Download the cert
    ◦gd_cross_intermediate.crt
    Then import it into the trusted root cert authority on your CAS boxes. Then you need to delete the other godaddy class2 root authority. Make sure you see the one you imported both will be named goaddy class2 root authority but one will be issued by valicert.
    Re-run the test and it will go away, I also saw the error with my domain as well using godaddy and got rid of it by using the new cert authority.
    James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

  • Field validation regular expression to accept only numbers

    Hello.
    I would like to have a field validation regular expression to accept only numbers - no characters. The list of pre-packaged regular expressions that are included with ApEx does not contain this and I am not a very good regular expression writer. Can anyone help?
    Thanks!
    Boris

    Under the Regular Expression validation all you need to have is:
    ^[[:digit:]]$For the email address it just depends how detailed you want it:
    ^((?>[a-zA-Z\d!#$%&'*+\-/=?^_`{|}~]+\x20*|"((?=[\x01-\x7f])[^"\\]|\\[\x01-\x7f])*"\x20*)*(?<angle><))?((?!\.)(?>\.?[a-zA-Z\d!#$%&'*+\-/=?^_`{|}~]+)+|"((?=[\x01-\x7f])[^"\\]|\\[\x01-\x7f])*")@(((?!-)[a-zA-Z\d\-]+(?<!-)\.)+[a-zA-Z]{2,}|\[(((?(?<!\[)\.)(25[0-5]|2[0-4]\d|[01]?\d?\d)){4}|[a-zA-Z\d\-]*[a-zA-Z\d]:((?=[\x01-\x7f])[^\\\[\]]|\\[\x01-\x7f])+)\])(?(angle)>)$or...
    [\w-]+@([\w-]+\.)+[\w-]+Hope these help
    Edited by: MikesHotRod on Sep 3, 2008 12:40 PM

  • How can i validate a Field so that it can accept only Numbers

    can any one help me to validate a filed so that it accepts only numbers if not alert user (client side JavaScript alert message)
    Iam using JSF and ADF BC as the Technologies in my application ..
    my requirement is to validate a filed so that i can accept only numbers in my jspx page..
    I had used ADF regularExpression Validator do so... but it results in exception
    java.lang.IllegalArgumentException: 'value' is not of type java.lang.String.
         at oracle.adf.view.faces.validator.ValidatorUtils.assertIsString(ValidatorUtils.java:36)
         at oracle.adf.view.faces.validator.RegExpValidator.validate(RegExpValidator.java:103)
         at oracle.adf.view.faces.component.UIXEditableValue.validateValue(UIXEditableValue.java:378)
    <af:validateRegExp pattern="[0-9]*"
    noMatchMessageDetail="Please enter Numbers only"/>
    Using validateRegExp i can only validate a field that accept String type data ..

    Hello experts,
    Am seeing the same problem while trying to validate an inputtext field that can only accept numbers. This input filed is part of a table ..Data expected here is an integer
    since that is what is gotten from my ejb/sent for update to the db.
    <af:inputText value="#{row.daysToReview}"
    required="#{bindings.AdminResultBeanresultBeanArray.attrDefs.days.mandatory}"
    columns="#{bindingsAdminResultBeanresultBeanArray.attrHints.days.displayWidth}"
    binding="#{backing_Admin.inputText2}"
    id="inputText2"
    label="#{res['admin.daysheader']}"
    autoSubmit="true">
    <af:validateRegExp pattern="[0-9]+"
    noMatchMessageDetail="Please enter a number"/>
    <f:convertNumber groupingUsed="false"
    pattern="#{bindings.AdminResultBeanresultBeanArray.formats.days}"/>
    </af:inputText>
    java.lang.IllegalArgumentException: 'value' is not of type java.lang.String.
    at oracle.adf.view.faces.validator.ValidatorUtils.assertIsString(ValidatorUtils.java:36)
    at oracle.adf.view.faces.validator.RegExpValidator.validate(RegExpValidator.java:103)
    at oracle.adf.view.faces.component.UIXEditableValue.validateValue(UIXEditableValue.java:378)
    <af:validateRegExp pattern="[0-9]*"
    noMatchMessageDetail="Please enter Numbers only"/>
    Using validateRegExp i can only validate a field that accept String type data ..
    Thanks in advance.

Maybe you are looking for

  • Copy button not working properly in service contract - crmd_order tcode

    Hi experts, I want to create a duplicate row in contract through Duplicate Button Supplied by SAP. As I understand the function of the duplicate row button is to copy the same set of information in next row with auto incremental or manual. As far as

  • Can I cancel my creative cloud plan but keep typekit?

    Is it possible to cancel my creative cloud plan but maintain my current typekit account? I've had my Typekit plan since before Adobe purchased them, once I signed up for Creative Cloud the plans were combined. I now no longer need my CC account but I

  • Epson Stylus Photo R2400 won't print large pages?

    I recently upgraded to Mac OS X Leopard. I immediately had problems with printing to my Epson Stylus Photo R2400 as a print driver gutenprint had suddenly replace my Epson driver when going thu dialog to print. Called and Epson and they got me thru p

  • Problem sending a HTML page

    How can i send a HTML by email?? When i am sending a HTML he shows the code in the mail instead of showing the HTML page?? Anyone knows how can i solve tyhis??

  • TopLink and Java 1.4

    Does TopLink support Java 1.4? If not, does anybody know when this is planned? Thanks.