<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Web Services API and SSL Alfresco in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155843#M110146</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi all,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have encountered some issues when I used Alfresco Web Service API to communicate with the ALfresco Repo running on SSL (https).&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;This is the way I configured my tomcat to run it on SSL.&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&amp;lt;Connector port="8463" maxHttpHeaderSize="8192"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; maxThreads="150" minSpareThreads="25" maxSpareThreads="75"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; enableLookups="false" disableUploadTimeout="true"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; acceptCount="100" scheme="https" secure="true"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; clientAuth="false" sslProtocol="TLS" &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; keystoreFile="certificates/.keystore"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; keystorePass="changeit"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; truststoreFile="C:\Program Files\Java\jdk1.5.0_04\jre\lib\security\cacerts"&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; /&amp;gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt;What I'm doing here is to run the sample: FirstWebServiceClient.java (in Alfresco SDK samples) with Alfresco SSL.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;After configuring the file: &lt;/SPAN&gt;&lt;STRONG&gt;webserviceclient.properties &lt;/STRONG&gt;&lt;SPAN&gt;(alfresco package) with the &lt;/SPAN&gt;&lt;STRONG&gt;repository.location&lt;/STRONG&gt;&lt;SPAN&gt; set to the right value:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;A href="https://localhost:8463/alfresco/api" rel="nofollow noopener noreferrer"&gt;https://localhost:8463/alfresco/api&lt;/A&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt;and what I got is this:&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;Exception in thread "main" org.alfresco.webservice.util.WebServiceException: Error starting session.&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.webservice.util.AuthenticationUtils.startSession(AuthenticationUtils.java:94)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.sample.FirstWebServiceClient.main(FirstWebServiceClient.java:54)&lt;BR /&gt;Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.AxisFault.makeFault(AxisFault.java:101)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:154)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.Call.invokeEngine(Call.java:2784)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.Call.invoke(Call.java:2767)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.Call.invoke(Call.java:2443)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.Call.invoke(Call.java:2366)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.client.Call.invoke(Call.java:1812)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.webservice.authentication.AuthenticationServiceSoapBindingStub.startSession(AuthenticationServiceSoapBindingStub.java:187)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.webservice.util.AuthenticationUtils.startSession(AuthenticationUtils.java:79)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;… 1 more&lt;BR /&gt;Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:186)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;… 12 more&lt;BR /&gt;Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at sun.security.validator.PKIXValidator.doBuild(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at sun.security.validator.Validator.validate(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;… 24 more&lt;BR /&gt;Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at java.security.cert.CertPathBuilder.build(Unknown Source)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;… 30 more&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;SPAN&gt;Have I done anything wrong ? DO I have to configure anything else ?.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Please Help.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 04 Aug 2008 03:04:39 GMT</pubDate>
    <dc:creator>nkhoang</dc:creator>
    <dc:date>2008-08-04T03:04:39Z</dc:date>
    <item>
      <title>Web Services API and SSL Alfresco</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155843#M110146</link>
      <description>Hi all,I have encountered some issues when I used Alfresco Web Service API to communicate with the ALfresco Repo running on SSL (https).This is the way I configured my tomcat to run it on SSL.&amp;lt;Connector port="8463" maxHttpHeaderSize="8192"&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; maxThreads="150" minSpareThreads="25" maxSp</description>
      <pubDate>Mon, 04 Aug 2008 03:04:39 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155843#M110146</guid>
      <dc:creator>nkhoang</dc:creator>
      <dc:date>2008-08-04T03:04:39Z</dc:date>
    </item>
    <item>
      <title>Re: Web Services API and SSL Alfresco</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155844#M110147</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;You need to import your web server certificate into your client with keytool.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Then in your code, you need to include the following:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;System.setProperty("javax.net.ssl.trustStore", "/path/to/.keystore");&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; System.setProperty("javax.net.ssl.trustStorePassword", "password");&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 14 Sep 2009 15:03:21 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155844#M110147</guid>
      <dc:creator>chapeaurouge</dc:creator>
      <dc:date>2009-09-14T15:03:21Z</dc:date>
    </item>
    <item>
      <title>Re: Web Services API and SSL Alfresco</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155845#M110148</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;I guess that putting passwords hardcoded in a conf file isn't a very good idea. Can't you use ssl keys?&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 16 Sep 2009 19:56:53 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155845#M110148</guid>
      <dc:creator>bwakkie</dc:creator>
      <dc:date>2009-09-16T19:56:53Z</dc:date>
    </item>
    <item>
      <title>Re: Web Services API and SSL Alfresco</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155846#M110149</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Maybe, I don't know. I just protect my conf file by setting restrictive permissions. These specific lines are in my code (.class) files… I don't fear much reverse engineering in my company (but who knows).&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 16 Sep 2009 20:30:39 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/web-services-api-and-ssl-alfresco/m-p/155846#M110149</guid>
      <dc:creator>chapeaurouge</dc:creator>
      <dc:date>2009-09-16T20:30:39Z</dc:date>
    </item>
  </channel>
</rss>

