orbeon under tomcat with Sun One WS SSL redirection

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

orbeon under tomcat with Sun One WS SSL redirection

skkarri
Hi,

I deployed OPS war file under tomcat. I have a sun one webserver running in secure mode.
All requests are redirected from Sunone to the tomcat(servlet/jsp engine) via jknsapi configured through obj.conf and worker.properties.

I have the root/ca/server certificates installed on the sunone webserver. Since tomcat is to work just like a jsp/servlet engine  there is no specific security setup on tomcat.

I am able to see the Orbeon home page and have the /ops/xforms-todo/ example working fine.
However, the /ops/xforms-bookcast/ tutorial errors out with "unable to find valid certification path to requested target".

Will appreciate if anyone can give suggestions/help to get the tutorial working with SSL.

Thank you,
Suresh
Reply | Threaded
Open this post in threaded view
|

Re: orbeon under tomcat with Sun One WS SSL redirection

Alessandro Vernet
Administrator
On Fri, Mar 7, 2008 at 5:51 PM, skkarri <[hidden email]> wrote:
>  Will appreciate if anyone can give suggestions/help to get the tutorial
>  working with SSL.

Is this happening with a 3.6 release or a nightly build?

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: orbeon under tomcat with Sun One WS SSL redirection

skkarri
I tried with both the nightly build and 3.6 release.
The /ops/xforms-bookcast/ tutorial works under the nightly build but does not work under the 3.6 release.

I also noticed that the /ops/xforms-controls does not work in either of the releases.
It errors out with "unable to find valid certification path to requested target" when reading external instance <xforms:instance id="countries-names-instance" src="services/countries"/> 

/Suresh


Alessandro Vernet wrote
On Fri, Mar 7, 2008 at 5:51 PM, skkarri <suresh@execs.com> wrote:
>  Will appreciate if anyone can give suggestions/help to get the tutorial
>  working with SSL.

Is this happening with a 3.6 release or a nightly build?

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/


--
You receive this message as a subscriber of the ops-users@ow2.org mailing list.
To unsubscribe: mailto:ops-users-unsubscribe@ow2.org
For general help: mailto:sympa@ow2.org?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws


-----
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
http://www.orbeon.com/
Reply | Threaded
Open this post in threaded view
|

Re: Re: orbeon under tomcat with Sun One WS SSL redirection

Alessandro Vernet
Administrator
On Mon, Mar 10, 2008 at 10:14 PM, skkarri <[hidden email]> wrote:
>  I tried with both the nightly build and 3.6 release.
>  The /ops/xforms-bookcast/ tutorial works under the nightly build but does
>  not work under the 3.6 release.

OK, so this one is good.

>  I also noticed that the /ops/xforms-controls does not work in either of the
>  releases.
>  It errors out with "unable to find valid certification path to requested
>  target" when reading external instance <xforms:instance
>  id="countries-names-instance" src="services/countries"/>

Could you find the URL that is failing? Maybe a request is being made
to an http://... URL instead of https://... URL. Maybe you will be
able to see that using Firebug on Firefox, and by going to the Net
tab.

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: orbeon under tomcat with Sun One WS SSL redirection

skkarri
Got it working...
Reviewed the code change between 3.6 and nightly build for the /ops/xforms-bookcast/ example that pointed to the code change required.

Seems like the relative url for reading external instance does not work under SSL redirection without the namespace prefix "oxf"

So it requires references like
schema="oxf:/apps/xforms-bookcast/schema.xsd"
instead of
schema="/apps/xforms-bookcast/schema.xsd"

or
<xforms:instance id="testapp" src="oxf:/apps/testapp/xml/iResults.xml" /> instead of
<xforms:instance id="testapp" src="xml/iResults.xml" />

xforms-control example had two issues.
1. required addition of the oxf prefix
2. reference did not have the .xml extension that refers to the instance file

The code <xforms:instance id="countries-names-instance" src="services/countries"/> needs to be changed to <xforms:instance id="countries-names-instance" src="oxf:/apps/xforms-controls/services/countries.xml"/>

/Suresh
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: orbeon under tomcat with Sun One WS SSL redirection

Alessandro Vernet
Administrator
Suresh,

On Wed, Mar 12, 2008 at 2:24 PM, skkarri <[hidden email]> wrote:

>
>  Got it working...
>  Reviewed the code change between 3.6 and nightly build for the
>  /ops/xforms-bookcast/ example that pointed to the code change required.
>
>  Seems like the relative url for reading external instance does not work
>  under SSL redirection without the namespace prefix "oxf"
>
>  So it requires references like
>  schema="oxf:/apps/xforms-bookcast/schema.xsd"
>  instead of
>  schema="/apps/xforms-bookcast/schema.xsd"
When you have relative paths in XForms, they are resolved relative to
the URL of the page. So I imagine that
schema="/apps/xforms-bookcast/schema.xsd" was trying to load the
schema by establishing an HTTPS connection. Now I don't know why this
connection would fail. Do you have a valid certificate for your HTTP
server?

Even if there is an issue there, what you did is the right thing. It
is better to load those resources through the resource manager
direction with the oxf:/ scheme; this way you avoid making an
additional HTTP request.

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws