Using PFX certificate to call web services

Question

Hi,
I need to use a PFX certificate to invoke a web services over HTTPS using a simple Java client; I've followed these steps:
1 - convert .pfx certificate in .cer format: I've imported the certificate in Internet Explorer and then exported in .cer format
2 - write a simple code before invocation of web service like this:           System.setProperty("javax.net.ssl.trustStore","C:\\myCertificate.cer");
System.setProperty("javax.net.ssl.trustStoreType","PKCS12");
System.setProperty("javax.net.ssl.trustStorePassword","myPwd");but it does'nt work and this exception occured:
java.net.SocketException: Default SSL context init failed: DerInputStream.getLength(): lengthTag=109, too big.Then I've tried to import my certificate in a jsk keystore by keystore tool; after I've changed my code like this:
System.setProperty("javax.net.ssl.keyStore","C:\\myjks.jks");          
System.setProperty("javax.net.ssl.keyStoreType","JKS");     
System.setProperty("javax.net.ssl.keyStorePassword","myPwd");but the eception is:
sun.security.validator.ValidatorException: No trusted certificate foundWich are the right stpes to use a pfx certificate in a Java environment?
Thanks in advance.
Rob

Answer 1

I've resolved my problem coding a custom SecureSocketFactory which I load programmatically into my SSL Context and then activate in my Axis client:
public class MySocketFactory implements SecureSocketFactory {
     private Hashtable ht;
     public MySocketFactory(Hashtable ht) throws Exception {
     this.ht = ht;
     public Socket create(String host, int port, StringBuffer hds,
               BooleanHolder bh) throws Exception {
          SSLSocket theSocket = null;
          try {
               KeyStore keyStoreKeys;
               KeyManagerFactory keyMgrFactory;
               SSLContext sslContext;
               keyStoreKeys = KeyStore.getInstance("PKCS12");               
               keyStoreKeys.load(new FileInputStream("mykey.pfx"),"mypwd".toCharArray());
               keyMgrFactory = KeyManagerFactory.getInstance("SunX509");
               keyMgrFactory.init(keyStoreKeys, "mypwd".toCharArray());
               sslContext = SSLContext.getInstance("SSL");
               sslContext.init(keyMgrFactory.getKeyManagers(), null, null);
               SSLSocketFactory socketFactory = sslContext.getSocketFactory();
               theSocket = (SSLSocket) socketFactory.createSocket(host, port);
          } catch (Exception e) {
               e.printStackTrace();
          return theSocket;
}Then, in my proxy client, I activate in Axis my factory by this statement:
               AxisProperties.setProperty("org.apache.axis.components.net.SecureSocketFactory", "socketfactory.MySocketFactory");bye
Rob