topic Re: cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException in Talend Studio

cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException

Anonymous — Sat, 16 Nov 2024 10:50:27 GMT

Hello Everyone ,
I have usecase where using cCXF component to consume external https based webservice and this webservice requires an ssl certificate to communicate.
We have loaded the certificate in a keystore and configured runtime with etc/ org.apache.cxf.http.conduits-test.cfg with tls parameters as below and deployed this route having cCXF but ended up with
Caused by: javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking : Received fatal alert: handshake_failure
Is this correct way of consuming a service with cCXF . Do we need to write any extra bean code in mediation like
here in section CONFIGURING SSL SUPPORT ?

______________________________________________________________
org.apache.cxf.http.conduits-token.cfg
url = https://localhost.*
client.ConnectionTimeout = 20000 client.ReceiveTime

To see the whole post, download it here

Re: cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException

Anonymous — Thu, 28 Jan 2016 15:52:45 GMT

Hi
don't you miss the "url" property from your conduit file?
g.

Re: cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException

Anonymous — Thu, 28 Jan 2016 17:26:21 GMT

Hi ,
Thank you for reply .I do have url on the http conduits . Edited the post with full file .
But my route is like below
cCXF(http://localhost:8089/testService) ->cProcessor-> cCXF(https :// externa-webservice)
will this service pick settings of ssl from http conduits ?
Thanks,
Nitesh

Re: cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException

Anonymous — Fri, 29 Jan 2016 08:33:19 GMT

Hi ,
Thank you for reply .I do have url on the http conduits . Edited the post with full file .
But my route is like below
cCXF(http://localhost:8089/testService) ->cProcessor-> cCXF(https :// externa-webservice)
will this service pick settings of ssl from http conduits ?
Thanks,
Nitesh

I believe the "org.apache.cxf.http.conduits-common.cfg" config is used for the localhost, however now I see the same truststore and url is used To go really deeply, you can start the container with -Djavax.net.debug=ssl and you will see which keystore, truststore is really loaded and used.
and looking at trace, try to use the url for " 192.168.101.25", not localhost
g.

Re: cCXF SSL :javax.net.ssl.SSLHandshakeException: SSLHandshakeException

Anonymous — Fri, 29 Jan 2016 17:35:40 GMT

Thank you for help Gabriel . On modifying
org.apache.cxf.http.conduits-token.cfg
url = https://localhost.*
to
url =https://<external-service>.*
made the cxf client on runtime to pick certificate from keystore pointed in org.apache.cxf.http.conduits-token.cfg

Thanks,
Nitesh