Web Service (SSL) and certificates (keytool) with INternet Explorer

Hi,
Followed this steps http://www.grallandco.com/blog/archives/2006/10/using_htts_with.html to have a secure SSL WEb service (with client authorization).
Tested from Jdeveloper it worked O.K.
Now I would like to test it with Internet explorer, but now server ask for certificate before internet show parameters page to invoke Web Service.
I generated self signed certificates and keystore using keytool. (This keystore is used by the OC4J and my proxy client).
Imported this certificate (.cer) to internet explorer succesfully, but when access URL for the web service (https) internet does not show this certificate to use it, so failed to connect...
keytool certificates could be used by INternet explorer for this purposes?, what am I doing wrong?
Thanks
J.

Hi,
I already configured HTTPS - client authenticate for OC4J, and you can work with follow step:
1: Create keystore for OC4J by java keytool
2: Using openssl to create certificate for your server (privatekey, certificate)
3. Using keytool to import your server's certificate (2) to keystore (1)
4. Generate client certificate (4)
5. Sign on client certificate (4) by privatekey and server certificate (20
6. Import client certificate to windows - (should create keystore with format pkcs12)
You can using "Java Certificate Services" to help you create keystore with multi format or sign cert....
Rgs

Similar Messages

Any Problems using SSL with Safari and the move with Internet explorer to require only TLS encryption.

Any Problems using SSL with Safari and the move with Internet explorer to require only TLS encryption.

Hi .
Apple no longer supports Safari for Windows if that's what you are asking > Apple apparently kills Windows PC support in Safari 6.0
Microsoft has not written IE for Safari for many years.

Web Service, SSL and Client Authentication

I tried to enable SSL with client authentication over a web service. I am using App Server 10.1.3.4.
The test page requires my certificate (firefox asks me to choose the certificate) the response page of the web service returns this error:
java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Bad response: 405 Method Not Allowed
Has anyone used web services with SSL client authentication?
Any clue why?
Regards

Any comment?
Thank you.

Question about web service security and certificate registry?

I'm trying to add security to my web service. I've created a keystore and added a certificate that was signed by a CA that I created (for testing only). The documentation says I need to create a Certificate registry and add my CA as a trusted CA. I can't quite figure this step out. Does anyone know how to do this or am I heading in the wrong direction?
thanks

Hi,
I'm almost there. I dont think that you can do exception handling in FormCalc. How do I trap the error. So far I have
if (HasValue(Get("http://despaiqo001.development.local:4001/crossdomain.xml")) == 0) then
$xfa.host.messageBox("not available")
else
$xfa.host.messageBox("got it")
endif
but when I change the URL so it cant access it, I get a form calc exception. Any samples of how I can script it?

Weird graphics and other issues with internet explorer in all versions.

One of our laptops has an issue with their Internet Explorer. First, whenever the user logs on and starts internet explorer and navigates to any website, the website loads for a bit but then immediately displays a "Page cannot be displayed" error.
Every single time. If we try browsing again/refreshing the page it loads fine. But during regular browsing, we might get that page again.
Another issue that happens is sometimes the graphics logos won't load properly. See screenshot:
http://i.imgur.com/0usOPpu.jpg
And this happens a lot. If this won't happen, the websites will only load with half its formatting missing.
Now we have:
-Thoroughly checked computer for viruses. Several full scans have been done with MalwareBytes with no issues found. Microsoft Security Essentials has been installed, full scan done, no viruses/spyware/adware found.
-We have tried upgrading to IE11. Same issue. Downgraded to IE10. Same issue. Downgraded to IE9, same issue yet again. IE was Reset each time.
We checked if it could be a network issue, but none of the other computers connected to the same switch has issue like that.
Any suggestions/ideas to try?

Hi,
I suggest you temporary disable antivirus and firewall, then check the result.
You may try the steps from the links below to check the issue:
"Internet Explorer cannot display the webpage" error
http://support.microsoft.com/kb/956196/en-us
Internet Explorer "Page Cannot be Displayed" error due to Bad Proxy Server Timeout
http://support.microsoft.com/kb/2551554
You may also refer to the computer or device manufacturer website and try installing the latest version of chipset, graphics card and video card drivers and check.
Hope it helps.
Regards,
Blair Deng
Blair Deng
TechNet Community Support

Why I cannot copy/paste any web links and texts? With Internet Explorer its possible, but with Firefox not.

When someone sends me a link in MSN and I try to copy it to the adress bar, it wount happen. Same is with textes in Firefox.

In Firefox 3.6.4 and later the default connection settings have been changed to "Use the system proxy settings".
See "Firefox connection settings" in [[Server not found]]
You can find the connection setting here: Tools > Options > Advanced : Network : Connection
If you do not need to use a proxy to connect to internet then select No Proxy
Another possible cause is security software (firewall) that blocks or restricts Firefox without informing you about that,.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls

Why does my Web Handler work with Internet Explorer, but not with Firefox

I am trying to develop a web page that uses the Simile Timeline (http://code.google.com/p/simile-widgets/wiki/Timeline) with data from SQL Server.
In initial testing of my timeline I tested it with Example.xml, a static XML file in the correct format to be event data. I wrote the following in the appropriate place within mytimeline's Javascript: -
var WebHandler = "Example.xml"
tl.loadXML(WebHandler, function (xml, url) { eventSourceFamily.loadXML(xml, url) });
This worked fine with both Firefox and Internet Explorer. I then changed the assignment to
var WebHandler = "GDBTimeline.ashx?Type=Family&Userid=" + getControlValue("input", "hdnUser");
so that invoked a web handler that could look up the SQL database and return the XML that I wanted, and wrote this web handler.
This works perfectly with Internet Explorer, but with FireFox the timeline band is blank. Yet when I examine the http traffic with Fiddler2 (http://www.fiddler2.com/fiddler2/) I see that with either browser there is a response from URL
/GDB_pages/GDBTimeline.ashx?Type=Family&Userid=robertb
that returns the XML that it is supposed to.
I have previously used web handlers with Firefox before, with no problems. The Fiddler results conclusively show that the web handler is invoked, and returns the appropriate XML, and this XML is identical to the XML from the static test with Example.xml.
Where do I start looking for answers? I don't even know if this is a Simile problem, a Firefox problem, or an ASP.NET problem.
Thank you, Robert.

Problem solved. The issue: Content Type was not correct.
Visual Studio creates the web handler with dummy code like this: -
Public Sub ProcessRequest(ByVal context As HttpContext) Implements IHttpHandler.ProcessRequest
context.Response.ContentType = "text/plain"
context.Response.Write("Hello World")
End Sub
I wrote a database query that set a string variable to the XML I wanted: -
Public Sub ProcessRequest(ByVal context As HttpContext) Implements IHttpHandler.ProcessRequest
Dim Outstring as string
' my logic to fill Outstring with XML
context.Response.ContentType = "text/plain"
context.Response.Write(Outstring)
End Sub
This works with Internet Explorer. However it's not strictly correct: to make it work with other browsers as well,
context.Response.ContentType = "text/plain"
should be
context.Response.ContentType = "text/xml"
It now works with IE, FF, and Chrome, and presumably all others.

I have used fire fox for a long time but have nothing but problems loading web sites..i think the time has come to uninstall firefox and go with internet explore..im tired of wasting my time trying to load web pages.

Question
i have used fire fox for a long time but have nothing but problems loading web sites..i think the time has come to uninstall firefox and go with internet explore..im tired of wasting my time trying to load web pages.

does not solve problem..guess i'll have to get rid of firefox..never had problen before but to much hassle loading web sites.

3px framed picture on a Web page with Internet Explorer and Google Chrome appears normal, but Firefox is on the right side frame 9px. Why?

3px framed picture on a Web page with Internet Explorer and Google Chrome appears normal, but Firefox is on the right side frame 9px. Why?

I'm not seeing this.
Reset the page zoom on pages that cause problems: View > Zoom > Reset (Ctrl+0 (zero); Cmd+0 on Mac)
* http://kb.mozillazine.org/Zoom_text_of_web_pages
Can you attach a screenshot?
* http://en.wikipedia.org/wiki/Screenshot
Use a compressed image type like PNG or JPG to save the screenshot and make sure that you do not exceed the maximum file size (1 MB).

Webservice call failed during execution (SSL and certificates) on NetWeaver 7.30

Hey experts,
i need your help!
We make webservice calls to sap me with our own software.
We connect to our software via SSL and certificates e.g. https://host:50001/XMII/CM/POD/MEDialogsWeb.irpt
At the beginning the software runs without any problems and than we become the following message on all our webservice:
thats the webservice configurations
(configuration - connectivity - single service administration):
(configuration - security - authentication and single sign-on)
if we restart the software after the error display, the webservice call runs successfully again.
is it a timeout?
can anybody help us?
Thanks,
Markus
our system info:
NetWeaver 7.30 Java
SAP ME 6.0
software runs log looks as following
software doesn't runs log looks as following
security Log Entry
more info from security_00.0.log
#2.0 #2014 06 06 14:51:17:136#+0200#Warning#/System/Security/WS#
com.sap.ASJ.wssec.020142#BC-ESI-WS-JAV-RT#tc~sec~wssec~service#C0000A650AD826FF0000000100000BEC#3855850000000005#sap.com/me~ws#com.sap.engine.services.wssec.authentication#Guest#0##207092CAED7111E3A01A0000003AD5EA#23386e31ed7911e39d560000003ad5ea#23386e31ed7911e39d560000003ad5ea#0#Thread[HTTP Worker [@648881277],5,Dedicated_Application_Thread]#Plain##
Received unsupported callback: com.sap.engine.interfaces.security.auth.SetLogonTicketCallback
Received unsupported callback: com.sap.engine.lib.security.http.HttpSetterCallback
Read data of type username and value MEFLEX from wsse:Security header and set on module javax.security.auth.callback.NameCallback
Read data of type username and value from HTTP header and set on module javax.security.auth.callback.NameCallback
Read data of type password and value xxx from wsse:Security header and set on module javax.security.auth.callback.PasswordCallback
Read data of type password and value xxx from HTTP header and set on module javax.security.auth.callback.PasswordCallback
Authentication for web service ShopOrderService, configuration ShopOrderService using security policy BASIC*SSO2*_*_*ws failed: Cannot authenticate the user.. (See SAP Note 880896 for further info).

Hi,
the authentication for the second call is failing. Have you tried suggest log level from note 880896 - Web Service authentication failure? I would also try to use something like SoapUI to test if the issue is caused by your application or something wrong on SAP side. Also coparing messages for the first and second calls might give you answer.
Cheers

External Web Service - User and password in HTTP header

Hi!
How is it possible to add user and password in the HTTP header in a external web service call?
I have created a "Portal Service from WSDL file - Client side" with the wizard in SAP Developer Studio. I following the Java Development Guide - Web Service Security, and use the secured service connection. I have also created a new System Landscape, but should the new system be based on HTTP, my own PAR or what?
How can I check that the user and password is added to the HTTP header or the SOAP envelope? Do I have to scan http traffic with a proxy as Paros or can I find the request sent from SAP EP in the logs?
Cheers
Asle

Hello All,
I have been struggling a bit while putting a reasonable security framework on a jax-rpc style web service. I'm using JWSDP1.2 to set up the webservice. I've tried to outline my problem below. Please correct me where I'm wrong.
I've been through the Sun's WS tutorials, but they are not really clear on security. However, from them I surmised that there are two decent authentication techniques. HTTP Basic and mutual authentication (MA) . Both have their drawbacks though. HTTP Basic suffers from poor encryption while MA is a bit difficult to set up on both client and server sides. Another problem with MA is that there is no central repository for users/passwords.
OK, what I would really like to do is use my own user database to verify users/passwords i.e. use a HTTP Basic like authentication (but at application level) but run it over SSL for encryption. It seems simple, but is it possible?
Also, I have noted that when I use HTTP Basic on the service side, and use a java client, then setting username/password has no effect. In other words, I can always access the web-service, even with wrong username/password.
Sorry for the long post. Hope someone can help. Thanks.

Cannot download a file with internet explorer 6 using SSL connection

Hello,
I am working on a application that uses SSL. But when the clicks a button to donwload a file using IE 6 or IE 7, internet explorer shows a error message saying that "The internet explorer cannot open this site". This error dont occur in Firefox, but i have to use Internet Explorer. And the error occurs only if i use https, with http it works fine.
I search the net and i found that internet explorer has a bug, that when the server sends the http header "Pragma: no-cache" or "Cache-control: no-cache,max-age=0,must-revalidate", then the internet explorer doesnt cache the file, and i cannot open it. See here: http://support.microsoft.com/kb/316431/en-us
My problem is that OC4J appears to send this headers automatically. I am using Oracle Enterprise Manager 10g Application Server Control 10.1.3.3.0. Here, is my code to send the file:
HttpServletResponse response = (HttpServletResponse)
FacesContext.getCurrentInstance().getExternalContext().getResponse();
response.setContentType("application/x-download");
response.setHeader("Content-Disposition", "attachement; filename=\"file.pfx\"");
response.setContentLength((new Long(myFile.length())).intValue());
OutputStream out=null;
try {
out = response.getOutputStream();
fis = new FileInputStream(myFile);
int n;
while ((n = fis.available())> 0) {
b = new byte[n];
int result = fis.read(b);
out.write(b, 0, b.length);
if (result == -1) break;
out.flush();
out.close();
} catch (Exception e){
throw new DownloadException("Erro ao enviar arquivo para o stream de download.");
finally{
FacesContext.getCurrentInstance().responseComplete();
You can see that i not send that headers in this code.
Here, is the headers sent to IE when i use https.
HTTP/1.x 200 OK
Date: Wed, 07 May 2008 17:40:28 GMT
Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server
Pragma: no-cache
Cache-Control: no-store
Surrogate-Control: no-store
Expires: Thu, 01 Jan 1970 12:00:00 GMT
Content-Length: 5208
Set-Cookie: JSESSIONID=ac1002292008f788e14d0d6e40c29f3185f2fc72e5b9.e3eTb3mTb3yKe34SbhqOaxyTe6fznA5Pp7ftnR9Jrl0; path=/actcers; secure
content-disposition: attachement; filename="file.pfx"
Keep-Alive: timeout=15, max=74
Connection: Keep-Alive
Content-Type: application/x-download
I hope that someone can helpme.
Tanks
Message was edited by:
user635088

Hi!
I don't have a solution fou you, just a few ideas =)
You can check what headers response contains with
response.containsHeader( "your_header_here");
http://java.sun.com/j2ee/sdk_1.2.1/techdocs/api/javax/servlet/http/HttpServletResponse.html#containsHeader(java.lang.String)
after that you could set/overwrite those headers that you don't like with, for example:
response.setHeader("Cache-control", "no-cache,max-age=0,must-revalidate");
Aparently Pragma and Cache-control headers should be used in pair, as noted here
http://curl.haxx.se/mail/archive-2005-12/0003.html
quote:"The author of Bad Behavior points out that RFC2616 requires that a
Pragma: header to be accompanied by a Cache-Control: header. From what I
see, it only says "SHOULD" (in section 14.32), but that is still a
strong recommendation and something to be considered, IMHO."
I'm a bit sceptical about you needing to cache the file, but if you feel strong about it, you could read this
http://www.mnot.net/cache_docs/#META
If you're working on SSL there is supposed to be some kind of validation, certificate or something like that. IE6 and 7 both have strong security measures in these regards. Maybe you should look something up in that direction.
Hope I helped.

Difference between Web Service Developer and Web Compononent Developer?

What's the difference between Web services Developer and Web Component Developer? What's their job description. I'm aiming to be a web application developer. Which track should I follow?

Here is another article on J2SE vs JEE:
http://www.velocityrevies.com/forums/t151124-what-is-j2se-vs-j2ee.html
I believe the people who said JSE is only for desktop development are not correct, as well as their saying their are 2 kinds of developer (web service and component).
As I understand it, web service developers provide a way to expose the data and functionality of a program written in a particular language (such as Java or C#) as XML documents to anyone subscribing to the service over the internet. The remote applications subscribing to the service therefore can be written in any other language. For example, imagine a Cobol program trying to get data from a program written in Java. Since both cobol and Java should have ways to parse XML documents, they don't have to know each other's syntax. There are many programs written in many many languages in the web and XML is a standard way for them to communicate. Web Services are an advanced topic and you shouldn't worry about it until you master web applications and/or desktop applications.
As I understand it, a web component developer creates java widgets that produce some visual image with basic functionality associated with it. For example, an html button. These widgets are used by other developers for the presentation layer when creating a web application or desktop application. I'm not sure about this definition since I never messed with web component development. I suggest you keep way from this specialized area on concentrate on web applications and/or desktop applications.
You can consider application development as devided into two general categories. Web development and Desktop development (there are others). Web development is further broken down into browser based applications and mobile device applications. I suspect their are more jobs in web development than desktop development. I therefore suggest you concentrate on browder based web development (just my opinion). However, each has their advantages and disadvantages over each other, depending on the task at hand(http://stackoverflow.com/questions/905365/desktop-development-versus-web-development)
Disclaimer:
http://myweb.accessus.net/~090/univdisc.html

HP Web Services Setup - Connection error. Check Internet connection.

I am trying to enable HP Web Services but Connection error. Check Internet connection. .
I use static ip with Preferred DNS Address: 8.8.8.8 and 8.8.4.4 and it does not work.
I changed to DHCP also it does not work.
I have a ZTE home modem router connected to the printer.
This question was solved.
View Solution.

Hi MaBek,
Can you check if your printers IP address is valid.
If you have a laptop or PC connected to the same network, open a browser and type the IP address in the address bar and hit enter.
This should open a Embedded web Server page if the IP address is valid.
Here you can navigate to Web Services tab and click on enable to enable web services.
Regards,
Oliver
"Although I work for HP, I'm speaking for myself and not on behalf of HP"--Please mark the post that solves your problem as "Accepted Solution"
"Say "Thanks" by clicking the Kudos Star in the post that helped you.

Entering values in Web Services ID and Description, for External Catalog

Hi,
I am trying to connect to an external Vendor Catalog from ERP. Pl note that we just have ERP ECC 6.0 and no SRM. I went to SPRO and followed menu path 'Materials Management >> Purchasing >> Web Services: ID and Description'. I am not sure what to enter in 1) Seq. Number 2) Name of Parameter for Web Service and 3) Call Structure COLUMNS.
I have URL from Vendor, User Name and Password. I need to know what values are mandatory here so I can successfully connect to external Catalog. If someone can give me sample values, I can try.
Any help is appreciated,
Niranjan

Update on 08/23/2011.
We are able to connect to Vendor Catalog, select items in Cart. When I press 'Place Order' button, I see all items populated in SAP PO ME21N screen. We can then add other information and create PO. This is working great. We have another question. Heard that with ERP ECC 6.0, we can only connect 1 vendor catalog. But with SRM, we can connect more than 1 vendor catalog. Is there a BAPI or change SAP code to connect more than 1 vendor catalog from ECC 6.0 ?

Web Service (SSL) and certificates (keytool) with INternet Explorer

Similar Messages

Maybe you are looking for