This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 79365 - Creating web service client fails if the application server has an invalid security certificate.
Summary: Creating web service client fails if the application server has an invalid se...
Status: VERIFIED FIXED
Alias: None
Product: webservices
Classification: Unclassified
Component: JAX-WS (show other bugs)
Version: 5.x
Hardware: Other All
: P1 blocker (vote)
Assignee: Milan Kuchtiak
URL:
Keywords:
Depends on:
Blocks: 81655
  Show dependency tree
 
Reported: 2006-06-28 18:58 UTC by rptmaestro
Modified: 2009-11-07 13:34 UTC (History)
4 users (show)

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments
Screen shot of error message while accessing WSDL from a site with invalid security certificate. (3.97 KB, image/png)
2006-07-19 16:56 UTC, rptmaestro
Details
Example of how I solved the same exception for my web service client. (703 bytes, text/plain)
2006-07-19 17:01 UTC, rptmaestro
Details
Proposed dialog showing the certificate information (60.00 KB, image/jpeg)
2006-08-17 16:36 UTC, Milan Kuchtiak
Details
Same error message (2.25 MB, image/jpeg)
2006-09-22 15:43 UTC, gc140975
Details
Dialog showing the certificate information (103.14 KB, image/jpeg)
2006-09-25 14:45 UTC, Milan Kuchtiak
Details
log file (7.59 KB, text/plain)
2006-10-05 16:19 UTC, sigalduek
Details
Image of dialog that opens when typing url in browser (74.26 KB, image/png)
2006-10-10 10:34 UTC, sigalduek
Details
browser opened with wsdl file (92.75 KB, image/png)
2006-10-10 10:35 UTC, sigalduek
Details

Note You need to log in before you can comment on or make changes to this bug.
Description rptmaestro 2006-06-28 18:58:57 UTC
I'm attempting to create a web service client from a WSDL via HTTPS on a 
server that does not have a valid security certificate. I expect the new web 
service client wizard to prompt me to allow the certificate, but it displays 
an error message instead.
Comment 1 Milan Kuchtiak 2006-06-30 07:56:23 UTC
Could you please attach that error message ?
Comment 2 Lukas Jungmann 2006-07-19 08:17:23 UTC
Marking INCOMPLETE as we do not have exact error message which appears yet.
Comment 3 rptmaestro 2006-07-19 16:56:24 UTC
Created attachment 32010 [details]
Screen shot of error message while accessing WSDL from a site with invalid security certificate.
Comment 4 rptmaestro 2006-07-19 17:01:37 UTC
Created attachment 32012 [details]
Example of how I solved the same exception for my web service client.
Comment 5 rptmaestro 2006-07-19 17:03:30 UTC
Removing incomplete keyword as requested information has now been supplied.
Comment 6 Lukas Jungmann 2006-07-19 17:10:23 UTC
thanks a lot for them
Comment 7 Milan Kuchtiak 2006-07-20 13:50:58 UTC
Should be fixed for 55.
Comment 8 Milan Kuchtiak 2006-08-17 16:36:04 UTC
Created attachment 33027 [details]
Proposed dialog showing the certificate information
Comment 9 Milan Kuchtiak 2006-08-17 16:37:55 UTC
I've created a dialog asking user to accept the given certificate.
See the previous attachement.
Comment 10 Milan Kuchtiak 2006-08-18 11:46:01 UTC
Fixed.
Added:
   xml/retriever/src/org/netbeans/modules/xml/retriever/CertificationPanel.java
   xml/retriever/src/org/netbeans/modules/xml/retriever/CertificationPanel.form
Updated:
http://xml.netbeans.org/source/browse/xml/retriever/src/org/netbeans/modules/xml/retriever/URLResourceRetriever.java?r1=1.1.2.3&r2=1.1.2.4
http://xml.netbeans.org/source/browse/xml/retriever/src/org/netbeans/modules/xml/retriever/Bundle.properties?r1=1.1.2.4&r2=1.1.2.5
Comment 11 gc140975 2006-09-22 15:43:08 UTC
Created attachment 34381 [details]
Same error message
Comment 12 gc140975 2006-09-22 15:44:07 UTC
I am reopening since I am not getting any proposed diolog in the build 060921_1
Comment 13 Milan Kuchtiak 2006-09-22 18:43:00 UTC
This is a problem of JAX-RPC client only (client in J2EE1.4 project).
It should work in J2EE1.5 projects.

If you still need to create client in J2EE1.4, the workaround is to create a
"dummy" J2EE1.5 project, create the "mappoint" client there, then it should work
also for J2EE1.4 project. JVM will remember the credentials to access the
certified WSDL.

Nevertheless, I am looking for solution also for J2EE1.4 projects.
Comment 14 Chris Webster 2006-09-23 01:02:15 UTC
Would another possible workaround for this issue be to create the web service
client from local files? If so, the Enterprise Pack workaround would be to run
the retriever wizard first and then use the local files as input for the client
wizard. 

Comment 15 Petr Jiricka 2006-09-25 08:20:19 UTC
How often does it happen that the certificate is invalid? How big problem is
this in practice? Is this really a P2, or should we downgrade to P3?
Comment 16 Milan Kuchtiak 2006-09-25 14:43:55 UTC
Showing Certification dialog also for JAX-RPC client. See tha attachment.

Diffs:
Checking in Bundle.properties;
/cvs/websvc/core/src/org/netbeans/modules/websvc/core/client/wizard/Bundle.properties,v
 <--  Bundle.properties
new revision: 1.24.2.4.2.18.2.1; previous revision: 1.24.2.4.2.18
Checking in WsdlRetriever.java;
/cvs/websvc/core/src/org/netbeans/modules/websvc/core/client/wizard/WsdlRetriever.java,v
 <--  WsdlRetriever.java
new revision: 1.7.32.3.2.3.10.1; previous revision: 1.7.32.3.2.3
Comment 17 Milan Kuchtiak 2006-09-25 14:45:40 UTC
Created attachment 34456 [details]
Dialog showing the certificate information
Comment 18 Lukas Jungmann 2006-09-26 11:05:53 UTC
The fix seems to be OK for me; feel free to commit it also to release55 branch
Thanks
Comment 19 Milan Kuchtiak 2006-10-02 13:32:58 UTC
Merged also to release55 :

Checking in Bundle.properties;
/cvs/websvc/core/src/org/netbeans/modules/websvc/core/client/wizard/Bundle.properties,v
 <--  Bundle.properties
new revision: 1.24.2.4.2.19; previous revision: 1.24.2.4.2.18

Checking in WsdlRetriever.java;
/cvs/websvc/core/src/org/netbeans/modules/websvc/core/client/wizard/WsdlRetriever.java,v
 <--  WsdlRetriever.java
new revision: 1.7.32.3.2.4; previous revision: 1.7.32.3.2.3
Comment 20 sigalduek 2006-10-05 16:17:32 UTC
Can not generate web service client for:
https://testgateway.pcslab.com/ParlayX2Web/services/TerminalLocation?wsdl

See attached log
Comment 21 sigalduek 2006-10-05 16:19:59 UTC
Created attachment 34934 [details]
log file
Comment 22 Milan Kuchtiak 2006-10-09 10:21:51 UTC
The wsdl file isn't accessible.
I cannot open that url in web browser.

Please, send me the proper URL, otherwise I'll close this issue.
Comment 23 sigalduek 2006-10-10 10:32:40 UTC
This is the correct URL. When I type it in my browser , I get a security check
for the certificate. (see attached images). Select the second botton to accept
it temporarily.
Comment 24 sigalduek 2006-10-10 10:34:49 UTC
Created attachment 35072 [details]
Image of dialog that opens when typing url in browser
Comment 25 sigalduek 2006-10-10 10:35:24 UTC
Created attachment 35073 [details]
browser opened with wsdl file
Comment 26 Milan Kuchtiak 2006-10-10 12:39:43 UTC
I cannot access that server. What is it about. 
My browser (Firefox) fails to open that wsdl.
I expect the certificate dialog to open but it doesn't.

I am behind the proxy.
Comment 27 Milan Kuchtiak 2006-10-10 13:03:52 UTC
First we need to access that wsdl outside the IDE (from a browser for example),
then we can investigate what's the problem.

From the log file messages: the wsdl url isn't accessible from IDE either. 
Comment 28 Milan Kuchtiak 2006-10-10 14:26:30 UTC
I got it, thank you.
The problem is in XML Retriever.
Looking for a fix.
Comment 29 Milan Kuchtiak 2006-10-10 14:52:14 UTC
Fixed.

Checking in URLResourceRetriever.java;
/cvs/xml/retriever/src/org/netbeans/modules/xml/retriever/Attic/URLResourceRetriever.java,v
 <--  URLResourceRetriever.java
new revision: 1.1.2.4.6.2; previous revision: 1.1.2.4.6.1

The problem was in URIResourceRetriever, specifically when secure wsdl
references relative file, e.g. (in this case) :
<wsdl:import location="parlayx_terminal_location_interface_2_0.wsdl"
namespace="http://www.csapi.org/wsdl/parlayx/terminal_location/v2_0/interface"/>

the accept() method returned false, since it didn't accept "https:" protocol.

The accept method is called with 2 string parameters (in this case):
- https://testgateway.pcslab.com/ParlayX2Web/services/TerminalLocation?wsdl
- parlayx_terminal_location_interface_2_0.wsdl

Reporter, or Re-Opener (Sigal Duek), please decide if this issue is really a
showstopper for you. If yes, we need to increase the priority (to P1) before
committing to release55 branch.
Comment 30 sigalduek 2006-10-10 15:31:03 UTC
Priority increased to P1 since the Sprint Mobility IDE will be based on 5.5.
We will need this fix in order to access all Sprint web services.
TIA
Comment 31 Milan Kuchtiak 2006-10-10 17:30:06 UTC
Sigal, please, is that a common scenario for Sprint IDE that secure wsdl url is
redirected to another (secure) url?
Comment 32 Lukas Jungmann 2006-10-10 17:38:58 UTC
Original issue reported here is fixed and v. in release55_dev branch. Merge the
fix also to release55 branch, please.
Thanks.

There's still one minor issue, filed as issue 86877, so let's discuss the rest
of this there.
Comment 33 Roderico Cruz 2006-10-10 19:12:18 UTC
Fix has been merged to release55 branch.
Comment 34 Lukas Jungmann 2006-10-11 14:48:19 UTC
v. in release55