login button

[solved] converting "http"-service to "https"-service

Forums :

Hello,
im trying to convert a running "http"-service into "https"-service. On apache-site, everything is ok and calling the (java/axis-)webservice via url works on both ports (80 and 443).
But calling the "https"-version via php doesn't work. It seems to me that the ssl-handshake isn't correct. if i call the service via url, the handshake looks as follows

. [info] Connection to child 0 established (server rklh.wuhu.net:443, client 127.0.0.2)
. [info] Seeding PRNG with 144 bytes of entropy
. [debug] ssl_engine_kernel.c(1731): OpenSSL: Handshake: start
. [debug] ssl_engine_kernel.c(1739): OpenSSL: Loop: before/accept initialization
. [debug] ssl_engine_io.c(1697): OpenSSL: read 11/11 bytes from BIO#79d9b0 [mem: 7b81f0] (BIO dump follows)
. [...]
. [debug] ssl_engine_kernel.c(1739): OpenSSL: Loop: SSLv3 read client hello A
. [debug] ssl_engine_kernel.c(1739): OpenSSL: Loop: SSLv3 write server hello A

Calling the webservice via php, the handshake is different:

. [info] Connection to child 2 established (server rklh.wuhu.net:443, client 127.0.0.2)
. [info] Seeding PRNG with 144 bytes of entropy
. [debug] ssl_engine_kernel.c(1731): OpenSSL: Handshake: start
. [debug] ssl_engine_kernel.c(1739): OpenSSL: Loop: before/accept initialization
. [debug] ssl_engine_io.c(1708): OpenSSL: I/O error, 11 bytes expected to read on BIO#79d9b0 [mem: 7b81f0]
. [debug] ssl_engine_kernel.c(1768): OpenSSL: Exit: error in SSLv2/v3 read client hello A
. [info] (70014)End of file found: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]
. [info] Connection to child 2 closed with abortive shutdown(server rklh.wuhu.net:443, client 127.0.0.2)

Question: my mistake? Or a bug at you?

Environment
. Linux openSuSE 10.3
. httpd-2.0.63
. php-5.2.6
. wso2-wsf-php-src-1.3.2

reguards
rig

AttachmentSize
myEchoServiceClient_http.php.txt1.58 KB
myEchoServiceClient_https.php.txt1.65 KB

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Hi, For me the ssl clients

Hi,

For me the ssl clients are working with wsf/php. So just to find out whether is it specific to your service or is there some problem in your WSClient, can you try the samples/wsdl_mode/wsdl_11_client.php with the endpoint "https://6ec2.dyndns.org/samples/wsdl_mode/wsdl_11_service.php". Note that follow http://blog.kaushalye.org/2008/05/how-to-obtain-remote-x509-certificate.html to obtain the server crt.

 

Thanks

Dimuthu

[solution] converting "http"-service to "https"-service

Hello,

the problem was, that my client environment was compiled without ssl-support.

re-compiled/installed with the following options
. -apache.: --enable-ssl
. -php....: --with-openssl
. -wsf....: --enable-openssl

the https-service works problem-free.

Hint: There is an error in attachment "myEchoServiceClient_https.php_.txt". the code after the hint "// create client in WSDL mode" reads correctly as follows:

. $client = new WSClient(array (
. "wsdl" =>"/path/to/myEchoService_v1_0.wsdl",
. "CACert" => "/path/to/ca.cert",
. "classmap" => $class_map)
. );

regards
rig

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.