Problems securing WSRP portlet with Java keystore

Hi.
I am following the tutorial in the webcenter developer guide to secure my WSRP (jsr-168) portlet using WS-security.
I have set-up my Java keystore for the producer and consumer with a trial CA certificate from verisign.
The producer.jks looks like this:
Keystore type: jks
Keystore provider: SUN
Your keystore contains 1 entry
consumer, Apr 19, 2007, trustedCertEntry,
Certificate fingerprint (MD5): 09:0E:0B:B9:62:A7:87:E8:A1:6F:10:A3:2D:75:12:2D
The producer store contains one alias, namely consumer.
I have copied the producer.cer and jks to a sub-dir of the application directory in the embedded Oracle webcenter OC4J server dir:
C:\jdevs\jdev10132\jdev\extensions\oracle.adfp.seededoc4j.10.1.3.2.0\j2ee\home\applications\webcenter-advanced\jks
In the EM console I want to configure the keystore (application-scoped) and signature settings for the WSRP markup service. However, after I specify the right keystore settings and alias for the signature (consumer) and click on ok I get the error message that the alias consumer does not exists in the keystore...
Am I missing a crucial step here or am I doing something wrong.
Hope you can help me
Kind regards
-Tom

Hello
I am not sure to see what could be the issue...
Do you have a simple portlet not secured in the provider ? And does this one works ?
If not you probably have a issue with the Registration URL, is this URL is correct ? Does the Portal middle tier can access the provider server ? (proxy, FW, ... can be installed between the portal and the provider and do not allow the portal to call this provider)
Regards
Tugdual Grall

Similar Messages

Problem unzipping larger files with Java

When I extract small zip files with java it works fine. If I extract large zip files I get errors. Can anyone help me out please?
import java.io.*;
import java.util.*;
import java.net.*;
import java.util.zip.*;
public class updategrabtest
     public static String filename = "";
     //public static String filesave = "";
    public static boolean DLtest = false, DBtest = false;
     // update
     public static void main(String[] args)
          System.out.println("Downloading small zip");
          download("small.zip"); // a few k
          System.out.println("Extracting small zip");
          extract("small.zip");
          System.out.println("Downloading large zip");
          download("large.zip"); // 1 meg
          System.out.println("Extracting large zip");
          extract("large.zip");
          System.out.println("Finished.");
          // update database
          boolean maindb = false; //database wasnt updated
     // download
     public static void download (String filesave)
          try
               java.io.BufferedInputStream in = new java.io.BufferedInputStream(new
               java.net.URL("http://saveourmacs.com/update/" + filesave).openStream());
               java.io.FileOutputStream fos = new java.io.FileOutputStream(filesave);
               java.io.BufferedOutputStream bout = new BufferedOutputStream(fos,1024);
               byte data[] = new byte[1024];
               while(in.read(data,0,1024)>=0)
                    bout.write(data);
               bout.close();
               in.close();
          catch (Exception e)
               System.out.println ("Error writing to file");
               //System.exit(-1);
     // extract
     public static void extract(String filez)
          filename = filez;
        try
            updategrab list = new updategrab( );
            list.getZipFiles();
        catch (Exception e)
            e.printStackTrace();
     // extract (part 2)
    public static void getZipFiles()
        try
            //String destinationname = ".\\temp\\";
            String destinationname = ".\\";
            byte[] buf = new byte[1024]; //1k
            ZipInputStream zipinputstream = null;
            ZipEntry zipentry;
            zipinputstream = new ZipInputStream(
                new FileInputStream(filename));
            zipentry = zipinputstream.getNextEntry();
               while (zipentry != null)
                //for each entry to be extracted
                String entryName = zipentry.getName();
                System.out.println("entryname "+entryName);
                int n;
                FileOutputStream fileoutputstream;
                File newFile = new File(entryName);
                String directory = newFile.getParent();
                if(directory == null)
                    if(newFile.isDirectory())
                        break;
                fileoutputstream = new FileOutputStream(
                   destinationname+entryName);
                while ((n = zipinputstream.read(buf, 0, 1024)) > -1)
                    fileoutputstream.write(buf, 0, n);
                fileoutputstream.close();
                zipinputstream.closeEntry();
                zipentry = zipinputstream.getNextEntry();
            }//while
            zipinputstream.close();
        catch (Exception e)
            e.printStackTrace();
}

In addition to the other advice, also change every instance of..
kingryanj wrote:
          catch (Exception e)
               System.out.println ("Error writing to file");
               //System.exit(-1);
..to..
catch (Exception e)
e.printStackTrace();
}I am a big fan of the stacktrace.

Problem with Java keystore and certificates (unable to find valid cert path

Our program is made so that when a certificate is not signed by a trusted Certification Authority, it will ask the user if he/her wishes to trust the certificate or not. If they decide to trust the certificate, it will accept the self signed certificate and import it into the keystore and then use that certificate to log the user in. This works fine. It will import the certificate into the keystore and use the specified ip address to establish a connection with the LDAP server (Active Directory in our case) and authenticate properly. However, the problem arises when we then try and connect to a different ip address (without restarting tomcat, if we restart tomcat, it works fine...). It imports the certificate into the keystore fine, but always gives the exception
"Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
and does not authenticate with our LDAP server (which is Active Directory). The problem seems to be that it is no longer looking at the System.setProperty("javax.net.ssl.trustStore", myTrustStore);
I have tried multiple times to just reset this property and try and "force" it to read from my specified trust file when this error happens. I have also imported the certificates directly into the <java_home>/jre/lib/security/cacerts and <java_home>/jre/lib/security/jssecacerts directories as the java documentation says that it will look at those directories first to see if it can find a trusted certificate. However, this does not work either. The only way that I can get this to work is by restarting tomcat all together.
If both of the certificates are already in the keystore before tomcat is started up, everything will work perfect. Again, the only problem is after first connecting to an IP address using TLS and importing the certificate, and then trying to connect to another IP address with a different certificate and import it into the keystore.
One of the interesting features of this is that after the second IP address has failed, I can change the IP address back to the first one that authenticated successfully and authenticate successfully again (ie
I use ip 1.1.1.1, import self signed certificate, authenticates successfully
login with ip 2.2.2.2 import self signed certificate, FAILS
login again with 1.1.1.1 (doesn't import certificate because it is already in keystore) successfully authenticates
Also, I am using java 1.5.0_03.
Any help is greatly appreciated as I've been trying to figure this out for over a week now.
Thanks

Please don't post in threads that are long dead and don't hijack other threads. When you have a question, start your own topic. Feel free to provide a link to an old post that may be relevant to your problem.
I'm locking this thread now.

Problems using deployJava.js with Java 7

I found problems which vary by browser to the following script in an HTML page on Windows 7:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Launch me!!!
<script src="http://www.java.com/js/deployJava.js"></script>
<script>
deployJava.setInstallerType("kernel");
deployJava.createWebStartLaunchButton("yourAppHere.jnlp", '1.7.0');
</script>
</body>
</html>
The problem shows itself when Java 7 is not yet installed. Note: There is no need to have an actual "yourAppHere.jnlp", since the problems surface prior that being a requirement.
Firefox 8.0:
When the Launch button is clicked on Firefox, a brief dialog with a progress bar appear showing a small download. At completion, a Security Warning dialog appears:
"This Java installer did not come from Sun...". The publisher is shown as Oracle America, Inc.
The install proceeds as normal if the user overides the warning (though eventually missing a real jnlp will catch up with you). I do not know for sure but suspect the problem is with deployJava.js. One fixing this might also want to consider the implications MacOSX port when it is up and ready.
IE 9.0.3:
This browser is a total failure. The initial download dialog progresses to the end, then remains & the session is hung. The dialog is modal, so the only escape other than the power button is killing it via Task Manager.
I am pretty sure these are bugs, but thought would see if others can reproduce Just save html to a file on desktop & double-click. Have these already been reported? Are there other tests that would be good? It has been years since I reported a Java bug, are there directions?
Edited by: user3055980 on Nov 13, 2011 11:36 AM

Before un-installing anything except the 1.7.0 JRE from a previous test, I did a search deployJava1.dll, I found 5. All show File Version 6.0.290.11 on the details tab of the properties dialog. That is not to say they are all the same file. I installed a 64 bit JDK, and apparently a 32 bit JRE. I do not remember exactly how I did that. Using the Process Explorer & clicking on the binoculars to find deployJava.dll, it shows that one being used is in C:\Windows\SysWOW64. I am really starting to hate having a JRE built into a JDK. Here is the list:
1- 513KB 11/7/2011 C:\Program Files\Java\jre6\bin
2- 513KB 11/7/2011 C:\Window\System32
3- 513KB 11/7/2011 C:\Program Files\Java\jdk1.6.0_29\jre\bin
4- 461KB 10/3/2011 C:\Program Files (x86)\Java\jre6\bin
5- 461KB 10/3/2011 C:\Windows\SysWOW64
FYI, checks for npDeployJava1.dll were consistent with above, though some were in a new_plugin sub dir. Also, FireFox is x86, not amd64.
Removing the JDK6 Update 29 (64-bit) knocked out #3.
Removing Java(TM) 6 Update 29 (64-bit) knocked out #1.
Removing Java(TM) 6 Update 29 knocked out # 4.
That leaves 2 & 5 still in place (Did not find any let over npDeployJava1.dll's). Nuked them manaully.
Still found a references to deployJava1.dll in registry, which were ripped out @
HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA}\InprocServer32
This registry pattern seemed to be repeated, just kept deleting.
Have a clean system, and am now retrying the tests, BUT IT TRIES TO RUN jre-6u29-windows-i586-iftw-k.exe INSTEAD! I actually followed through for IE & 1.6 is what gets installed NOT 1.7. This is by far the worst. The other stuff might just be because of that stupid JRE instead the JDK. Double checked both the html & JNLP they are still asking for 1.7. Is this a bug or somehow intentional?

Problem installing program running with Java

When i start to run a program appear a window witj following message: "preparing to run java virtual machine"..after that appear next small window with installshield wizard. When make a transition between this small windows to start to install the program, nothing happens it is he does not make this transition.
I already download the new version without results.
Do have any ideia what could be the problem.?
Thanks
Jorge

Which JRE is bundle inside your application ?
Is it International or US only ??
I have a reason to believe that US version is
throwing NullPointerException when installing it
on windows 2000 server
When you starting the installer, The installer is unpacking the JRE - so check which directory it expanded and than Try running java.exe from the JRE that was installed.
Maybe its currupted, You dont need to run any code
even if your run java.exe without anything the
exception is thrown
If exception is thrown try the international version of JRE

Login security in flex with Java

Hi ,
I am looking for login secruity with session in flex.
Thanks,
Alok

If you want to use Java as the back end, you have BlazeDS and
LiveCycle Data services to make your programming simpler. BlazeDS
and LCDS will allow you to invoke the Java classes from the Flex
application. For more details on BlazeDS and LCDS visit the URLs
below.
http://www.adobe.com/products/livecycle/dataservices/
http://opensource.adobe.com/wiki/display/blazeds/BlazeDS
Hope this helps.

Hi I have a geometry problem.Can anyone help with java code

Hi I have a non simple polygon . My job is to make it a simple. for that First I need to find the intersecting lines say line AB intersects line CD. If so then I must replace AB & CD with AC & BD or AD or BC which ever keeps the polygon closed . So can anyone help me out with this code
import java.io.*;
import java.awt.*;
import java.awt.geom.*;
import java.awt.image.*;
import javax.swing.*;
public class Simple{
static int POINTWID = 4; // size of points
// the x and y arrays hold the coordinates
// the B array is the order of the points in the polygon
// You want to fill the C array with the simple polygon
static double x[] = new double[200];
static double y[] = new double[200];
static int B[] = new int[200]; // the permutation matrix
static int C[] = new int[200]; // the one that becomes simple
static SimpleFrame myFrame;
static int numPoints = 3;
public static void main(String args[]) {
makePolygons();
// Create the frame to draw on
myFrame = new SimpleFrame();
myFrame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
myFrame.setSize(600, 600);
myFrame.setVisible(true);
public static void makePolygons(){
// Build an array of random points in the unit square
for(int i = 0; i < numPoints; i++){
x[i] = Math.random();
y[i] = Math.random();// Sample program
B[i] = i; // default permutation
// Create the simple polygon
createSimplePolygon();
* This is the only function you need to mess with
public static void createSimplePolygon(){
// Initialize the C[] array with the identity permutation
for(int i = 0; i < numPoints; i++)
C[i] = i;
// Bubble sort the points from left to right
for(int i = 0; i < numPoints; i++)
for(int j = 0; j < numPoints - 1; j++)
if(x[C[j]] > x[C[j+1]]){
int temp = C[j];
C[j] = C[j+1];
C[j+1] = temp;
public static class SimpleFrame extends JFrame{
public static JSlider numPointsSlider;
public SimpleFrame()
super("Create you own Simple Polygon");
Container content = getContentPane();
content.setLayout(new java.awt.BorderLayout());
JTabbedPane tabbedPane = new JTabbedPane();
tabbedPane.setPreferredSize (new java.awt.Dimension(300, 400));
tabbedPane.addTab("Scrambled", new ScrambledPanel());
tabbedPane.addTab("Simple", new SimplePanel());
content.add(tabbedPane, java.awt.BorderLayout.CENTER);
// Slider for the number of points
numPointsSlider = new JSlider (javax.swing.SwingConstants.HORIZONTAL,
3, 100, 11);
numPointsSlider.addChangeListener (new javax.swing.event.ChangeListener () {
public void stateChanged (javax.swing.event.ChangeEvent evt) {
numPointsSliderStateChanged (evt);
content.add(numPointsSlider, java.awt.BorderLayout.SOUTH);
private void numPointsSliderStateChanged (javax.swing.event.ChangeEvent evt) {
numPoints = numPointsSlider.getValue();
makePolygons();
repaint();
public static class ScrambledPanel extends JPanel{
public void paintComponent(Graphics g){
super.paintComponent(g);
Graphics2D g2 = (Graphics2D) g;
// First set the scaling to fit the window
Dimension size = getSize();
int Xwid = (int) (0.95 * size.width);
int Ywid = (int) (0.95 * size.height);
// First draw the segments
g2.setColor(Color.red);
for(int i = 0; i < numPoints; i++)
g2.drawLine((int) (Xwid * x[B[i]]),
(int) (Ywid * y[B[i]]),
(int) (Xwid * x[B[(i+1) % numPoints]]),
(int)(Ywid * y[B[(i+1) % numPoints]]));
// Now draw the points
for(int i = 0; i < numPoints; i++){
g2.fillRect((int) (Xwid * x) - POINTWID,
(int) (Ywid * y[i]) - POINTWID,
2*POINTWID + 1, 2*POINTWID + 1);
public static class SimplePanel extends JPanel{
public void paintComponent(Graphics g){
super.paintComponent(g);
Graphics2D g2 = (Graphics2D) g;
// First set the scaling to fit the window
Dimension size = getSize();
int Xwid = (int) (0.95 * size.width);
int Ywid = (int) (0.95 * size.height);
// First draw the segments
g2.setColor(Color.red);
for(int i = 0; i < numPoints; i++)
g2.drawLine((int) (Xwid * x[C[i]]),
(int) (Ywid * y[C[i]]),
(int) (Xwid * x[C[(i+1) % numPoints]]),
(int)(Ywid * y[C[(i+1) % numPoints]]));
// Now draw the points
for(int i = 0; i < numPoints; i++){
g2.fillRect((int) (Xwid * x[i]) - POINTWID,
(int) (Ywid * y[i]) - POINTWID,
2*POINTWID + 1, 2*POINTWID + 1);

Hi I am sorry I could explain you properly . Ok
My program gives me a polygon(as you can see when u
run this program)But the polygon is a non simple
polygon.So to make this polygon we must remove all
the crossings betweeen edges in the polygon.The
algorithm which i gave will remove all the crossings
and make the polygon simple.You did not give an algorithm!
SO my job is to take the
existing code and implement the algorithm for this
program in the Createsimpelpolygon() function. For
this First the program must find whether two edges
cross if they cross then swap the vertices like
replace AB & CD with AC & BD or AD & BC.Which ever
keeps the polygon closed . Still not entirely clear to me. You cannot just go and replace vertexes from a polygon: that way you'll end up with a different polygon.
So as we go on we find the
many crossings and iterate the algorithm on all the
crossings until we get simple polygon.Like I said: I don't really understand what it is you're after. You did not respond to my suggestions, so I gather it is not what you're after?
What about Polygon Tessellation (Google for it)? Perhaps that's what you want.
Also, why do you not create a (or use java.awt's) Point class and a Polygon class which holds a java.util.Set of Point's? Your current code looks rather messy.

Problem on distributed computing with java..?

My problem is:
I have one server and three clients.Firstly 3 clients sends data simultaneously to the server and should be accessed by the server at the same instant.
Server does some calculations using this data and should broadcast the results to clients.The clients after sending the data to server are engaged with their own work.After the completion of their work they should receive the data sent by the server.
Please suggest the solution.
And also which package/methods should I use for broadcasting Data to clients....

Sockets and threads?

Having problem setting system property with java -D name = value

I want some clarification. Consider the statement below
java -Djava.rmi.server.codebase=file:/c:\public_html\classes/
-Djava.rmi.server.hostname=xyz.com
-Djava.security.policy=java.policy engine.ComputeEngine
1. Is the syntax right for specifying a file directory as codebase?
-Djava.rmi.server.codebase=file:/c:\public_html\classes/
2. What does this hostname property imply? Does this mean that the program which is started can be accesed by xyz.com?
-Djava.rmi.server.hostname=xyz.com

Kurt,
I modified some of my directory structure as shown below and tried to execute. But I have got the same error again. Could you tell how to correct this error?
Under c:\home\ann\public_html\classes directory, I have the Following:
Sub-directory compute [Contains Compute.class and Task.class File]
Sub-directory engine [Contains ComputeEngine_Skel.class and ComputeEngine_Stub.class Files]
Sub-directory Meta-inf [Contains Manifest.mf file]
File compute.jar
Under c:\home\ann\src directory, I have the following:
Sub-directory engine [Contains ComputeEngine.java, ComputeEngine.class]
File java.policy
Under c:\home\jones\public_html\classes directory, I have the Following:
Sub-directory client [Contains Pi.class File]
Current working directory is c:\home\ann\src
The output from echo %CLASSPATH% was c:\home\ann\src; c:\home\ann\public_html\classes\compute.jar
When executing the command:
java -Djava.rmi.server.codebase=file:/c:\home\ann\public_html\classes
-Djava.rmi.server.hostname=bwing2
-Djava.security.policy=java.policy engine.ComputeEngine
I am getting the error,
ComputeEngine Exception: Stub class not found: engine.ComputeEngine_Stub; nested exception
is : java.lang.ClassNotFoundException: engine.ComputeEngine_Stub
java.rmi.StubNotFoundException: Stub class not found:
Sridhar

Have a problem using flex ui with Java application

Hi, I have a built a Flex UI for a java project. The UI has
some forms which use a servlet for POST and data populated from
servlet. I have used HTTP service to make the calls. I have built
my application i.e UI in Flex Builder and when I run my application
from flex builder everything works fine i.e data populated
correctly..
But when I open the projects folder and run the html file
generated the Http Service does not happen. Can anybody tell me why
is this so?? . Moreover I want use this UI for my already existing
java project. So what all files (i,e. html, mxml, swf) will be
required to be copied to my java project for the UI to work ..
.Thanks in advance...

well, that's because Flex Builder is tell Flash player to
trust stuff in the bin folder:
http://viconflex.blogspot.com/2008/08/why-no-sandbox-violation-running-from.html
ATTA

Problem faced Using Swig with Java

Hi,
I have been using SWIG-1.3.29 to Wrap C into Java.I hava interface file ie "example.i" and java File
"main.java". Now i set the path
     JAVA_INCLUE
     C:\Program Files\Java\jdk1.5.0_01\include;
     JAVA_BIN
     C:\Program Files\Java\jdk1.5.0_01\bin;
and set java.library.path=.;D:\........\example.i;%path%;
     1.Now In Command Prompt
          Swig -java -example.i
     2. Swig makes "example.java", "example_wrap.c","exampleJNI.java".
     3.Compile the java file
     4.After Compilation i try to run the java program ,the following exception is occuring.
          java.lang.UnsatisfiedLinkError: no example in java.library.path
          at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1682)
          at java.lang.Runtime.loadLibrary0(Runtime.java:822)
          at java.lang.System.loadLibrary(System.java:992)
          at main.main(main.java:10)
If i hava missed any steps please tell me.

one more thread?

JDAPI problem with java 1.6 SR9 in AIX

Hi,
i install Oracle Forms 11g R2 in AIX. My AIX server use IBM java 1.6 SR9.
When i run JDAPI, i face this problem: *oracle.forms.jdapi.JdapiStatusException: jniinitialize: Failed to create new forms context*.
but when i use java 1.6 SR8 or SR7 . it's OK.
Anyone face the problem when run jdapi with java 1.6 SR9 ?
Thank in advance.
hoangdise

After having a closer look at metalink it seems to be obvious, that Forms 6i (8.0.6.) only supports user exits generated with the 8.0.6. precompiler.
If this is the case new questions follow:
Is there a way to get a 8.0.6. precompiler?
Is it possible to connect to a 8.1.5. database with such a user exit? Does anybody have corresponding experiences?
Our customer uses a 8.1.7. database. What about connecting to that database with the user exit?
/Ralph

Java Keystore

Hi,
How secure is using a java keystore to store private keys. Does it depend on the strength of the password? Thanks in advance

Sooner or later, somebody has to be able to get the keys out of the keystore, or they aren't much use. I suspect the strength of the keystore is more directly related to how you protect the password, than on the password itself - although all the standard "don't use dictionary words for your passwords" caveats apply.
If you write the keystore password into your startup script, then the weak link is more likely to be the protection of that script than the pwd itself.
Grant

WSRP or JSR-168 Portlets with PDK-Java

Is it possible to create WSRP or JSR-168 compliant portlets with PDK-Java or Bi beans?
Thanks,

When PDK-Java was designed 4-5 years ago, there was no portlet standard on the horizon. While from an architecture point of view PDK-Java is very similar to WSRP, it uses a proprietary protocol. Therefore you can't expose PDK-Java portlets through WSRP.
You can, however, leverage the BI-beans in JSR 168 portlets, just like in any other Java environment.
Peter

Discussion Forum Portlet - Problems with JAVA and UTF8?

Hi
I installed the Discussion Forum Portlet successfully. It also seems that almost everything works fine. There's only a problem if I have new posts that include special German characters (Umlaute) like ä, ö, ü or special French characters like é, è or ç. They are saved correctly in the table but if you view the post the characters are not displayed correctly.
Example
input: ça va?
result: Ã§a va?
I know that there are problems with Java and UTF8 Database. Is there a possibility to change this (bug)?
Regards
Mark

Here's what I got. I don't see anything that helps but I'm kinda new to using SQL and java together.
D:\javatemp\viddb>java videodb
Problem with SQL java.sql.SQLException: [Microsoft][ODBC Microsoft Access Driver
] Syntax error in CREATE TABLE statement.
Driver Error Number-3551
java.sql.SQLException: [Microsoft][ODBC Microsoft Access Driver] Syntax error in
CREATE TABLE statement.
at sun.jdbc.odbc.JdbcOdbc.createSQLException(Unknown Source)
at sun.jdbc.odbc.JdbcOdbc.standardError(Unknown Source)
at sun.jdbc.odbc.JdbcOdbc.SQLExecDirect(Unknown Source)
at sun.jdbc.odbc.JdbcOdbcStatement.execute(Unknown Source)
at sun.jdbc.odbc.JdbcOdbcStatement.executeUpdate(Unknown Source)
at videodb.main(videodb.java:31)
D:\javatemp\viddb>

Problems securing WSRP portlet with Java keystore

Similar Messages

Maybe you are looking for