SSL configuration question
|
View:
New views
10 Messages
—
Rating Filter:
Alert me
|
 |
SSL configuration question
by gsherwood
::
Rate this Message:
I have been using axis2c-src-1.6.0 for a few days with an existing service running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as an Apache2 module. The samples and hello work with http transport, but I have not run https successfully with axis2 yet. The problem appears to be similar to that reported 2009-05-14 by chankm (Kwang Mien), but there does not seem to be a response to that message in the archive. Can anyone explain why axis2c is not using https here?
Thanks for the help. George Sherwood I am using a test system with a self-signed certificate. SSL is working with httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as expected from a remote browser. However SSL does not appear to be configured correctly for axis2. Both of the following commands seem to run OK. ./echo http://64.232.245.115/axis2/services/echo ./hello http://64.232.245.115/axis2/services/hello But the responses for the corresponding https endpoints do not. ./echo https://64.232.245.115:443/axis2/services/echo yields "echo client invoke FAILED!" ./hello https://64.232.245.115:443/axis2/services/hello yields "hello client invoke FAILED!" The echo.log contains the following lines. [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport protocol is unsupported by axis2 [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport Protocol, HTTPS transport not enabled. [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data stream null or socket error for host 64.232.245.115 and 443 port [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read attempt(HTTP) for the reply without sending the request [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender invoke failed [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: Error code: 75 :: A read attempt(HTTP) for the reply without sending the request And the hello_client.log contains the following lines. [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport protocol is unsupported by axis2 [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport Protocol, HTTPS transport not enabled. [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data stream null or socket error for host 64.232.245.115 and 443 port [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read attempt(HTTP) for the reply without sending the request [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender invoke failed [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: Error code: 75 :: A read attempt(HTTP) for the reply without sending the request Relevant lines from the axis2.xml file are: <transportReceiver name="https" class="axis2_http_receiver"> <parameter name="port" locked="false">443</parameter> <parameter name="exposeHeaders" locked="true">false</parameter> </transportReceiver> ... <transportSender name="https" class="axis2_http_sender"> <parameter name="PROTOCOL" locked="false">HTTP/1.1</parameter> </transportSender> <parameter name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt</parameter> Both the server module and SSL client were configured with openssl enabled. Details are available if needed. |
|
|
Re: SSL configuration question
by Selvaratnam Uthaiyashankar
::
Rate this Message:
Hi,
It seems Axis2/C engine (client side) is not configured with --enable-openssl=yes. Is there any errors when you configure? Can you configure with --enable-openssl=yes again and see? Regards, Shankar On Sun, Sep 27, 2009 at 8:14 AM, <gsherwood@...> wrote: > I have been using axis2c-src-1.6.0 for a few days with an existing service > running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as an > Apache2 module. The samples and hello work with http transport, but I have > not run https successfully with axis2 yet. The problem appears to be similar > to that reported 2009-05-14 by chankm (Kwang Mien), but there does not seem > to be a response to that message in the archive. Can anyone explain why > axis2c is not using https here? > Thanks for the help. > George Sherwood > > I am using a test system with a self-signed certificate. SSL is working with > httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as expected > from a remote browser. However SSL does not appear to be configured > correctly for axis2. > > Both of the following commands seem to run OK. > ./echo http://64.232.245.115/axis2/services/echo > ./hello http://64.232.245.115/axis2/services/hello > > But the responses for the corresponding https endpoints do not. > ./echo https://64.232.245.115:443/axis2/services/echo > yields "echo client invoke FAILED!" > ./hello https://64.232.245.115:443/axis2/services/hello > yields "hello client invoke FAILED!" > > The echo.log contains the following lines. > [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport protocol is > unsupported by axis2 > [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport > Protocol, HTTPS transport not enabled. > [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data stream > null or socket error for host 64.232.245.115 and 443 port > [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read attempt(HTTP) > for the reply without sending the request > [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 > [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender invoke > failed > [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: Error > code: 75 :: A read attempt(HTTP) for the reply without sending the request > > And the hello_client.log contains the following lines. > [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport protocol is > unsupported by axis2 > [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport > Protocol, HTTPS transport not enabled. > [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data stream > null or socket error for host 64.232.245.115 and 443 port > [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read attempt(HTTP) > for the reply without sending the request > [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 > [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender invoke > failed > [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: Error > code: 75 :: A read attempt(HTTP) for the reply without sending the request > > Relevant lines from the axis2.xml file are: > <transportReceiver name="https" class="axis2_http_receiver"> > <parameter name="port" locked="false">443</parameter> > <parameter name="exposeHeaders" locked="true">false</parameter> > </transportReceiver> > ... > <transportSender name="https" class="axis2_http_sender"> > <parameter name="PROTOCOL" locked="false">HTTP/1.1</parameter> > </transportSender> > <parameter > name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt</parameter> > > Both the server module and SSL client were configured with openssl enabled. > Details are available if needed. > -- S.Uthaiyashankar Software Architect WSO2 Inc. http://wso2.com/ - "The Open Source SOA Company" |
|
|
|
|
|
Re: SSL configuration question
by Selvaratnam Uthaiyashankar
::
Rate this Message:
Hi,
Do you have any other Axis2/C related library in your LD_LIBRARY_PATH? If so, can you remove them or put ${AXIS2C_HOME}/lib/ as the first entry in $LD_LIBRARY_PATH? Also, can you do "ldd <client_program> and see what are the libraries/paths link to client? Regards, Shankar On Fri, Oct 2, 2009 at 1:04 AM, <gsherwood@...> wrote: > Shankar, > Thank you for your help. I reconfigured as follows. > > cd /home/gbs/axis2c/axis2c-src-1.6.0 > su > export AXIS2C_HOME=/usr/local/axis2c > export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:${AXIS2C_HOME}/lib/ > ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} > --with-apache2="/usr/local/apache2/include" > config_out 2> config_err > > I found no errors or warnings in config_out; config_err was empty. I found > no errors in the config.log file. The only warning seems to be unrelated: > cc1: warning: command line option "-fno-rtti" is valid for C++/ObjC++ but > not for C > Relevant lines from config.log are: > > $ ./configure --enable-openssl=yes --prefix=/usr/local/axis2c > --with-apache2=/usr/local/apache2/include > ... > configure:21638: checking whether to use openssl > configure:21651: result: yes > ... > config.status:746: creating src/core/transport/http/sender/ssl/Makefile > ... > configure:23296: === configuring in util > (/home/gbs/axis2c/axis2c-src-1.6.0/util) > configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' > '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' > --cache-file=/dev/null --srcdir=. > configure:23296: === configuring in axiom > (/home/gbs/axis2c/axis2c-src-1.6.0/axiom) > configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' > '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' > --cache-file=/dev/null --srcdir=. > configure:23296: === configuring in neethi > (/home/gbs/axis2c/axis2c-src-1.6.0/neethi) > configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' > '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' > --cache-file=/dev/null --srcdir=. > configure:23296: === configuring in guththila > (/home/gbs/axis2c/axis2c-src-1.6.0/guththila) > configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' > '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' > --cache-file=/dev/null --srcdir=. > > The diff command showed this config.log to be identical to that of the > previous configure attempt. > I appreciate your help with this. > George > > -------------- Forwarded Message: -------------- > From: Selvaratnam Uthaiyashankar <uthaiyashankar@...> > To: Apache AXIS C User List <axis-c-user@...> > Subject: Re: SSL configuration question > Date: Thu, 01 Oct 2009 03:02:18 +0000 > > > Hi, > > It seems Axis2/C engine (client side) is not configured with > --enable-openssl=yes. Is there any errors when you configure? Can you > configure with --enable-openssl=yes again and see? > > Regards, > Shankar > > On Sun, Sep 27, 2009 at 8:14 AM, wrote: >> I have been using axis2c-src-1.6.0 for a few days with an existing service >> running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as an >> Apache2 module. The samples and hello work with http transport, but I have >> not run https successfully with axis2 yet. The problem appears to be >> similar >> to that reported 2009-05-14 by chankm (Kwang Mien), but there does not >> seem >> to be a response to that message in the archive. Can anyone explain why >> axis2c is not using https here? >> Thanks for the help. >> George Sherwood >> >> I am using a test system with a self-signed certificate. SSL is working >> with >> httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as expected >> from a remote browser. However SSL does not appear to be configured >> correctly for axis2. >> >> Both of the following commands seem to run OK. >> ./echo http://64.232.245.115/axis2/services/echo >> ./hello http://64.232.245.115/axis2/services/hello >> >> But the responses for the corresponding https endpoints do not. >> ./echo https://64.232.245.115:443/axis2/services/echo >> yields "echo client invoke FAILED!" >> ./hello https://64.232.245.115:443/axis2/services/hello >> yields "hello client invoke FAILED!" >> >> The echo.log contains the following lines. >> [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport protocol >> is >> unsupported by axis2 >> [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport >> Protocol, HTTPS transport not enabled. >> [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data stream >> null or socket error for host 64.232.245.115 and 443 port >> [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read attempt(HTTP) >> for the reply without sending the request >> [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 >> [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender invoke >> failed >> [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: Error >> code: 75 :: A read attempt(HTTP) for the reply without sending the request >> >> And the hello_client.log contains the following lines. >> [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport protocol >> is >> unsupported by axis2 >> [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport >> Protocol, HTTPS transport not enabled. >> [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data stream >> null or socket error for host 64.232.245.115 and 443 port >> [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read attempt(HTTP) >> for the reply without sending the request >> [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 >> [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender invoke >> failed >> [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: Error >> code: 75 :: A read attempt(HTTP) for the reply without sending the request >> >> Relevant lines from the axis2.xml file are: >> >> 443 >> false >> >> ... >> >> HTTP/1.1 >> >> >> > name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt >> >> >> Both the server module and SSL client were configured with openssl >> enabled. >> Details are available if needed. >> > > > > -- > S.Uthaiyashankar > Software Architect > WSO2 Inc. > http://wso2.com/ - "The Open Source SOA Company" -- S.Uthaiyashankar Software Architect WSO2 Inc. http://wso2.com/ - "The Open Source SOA Company" |
|
|
|
|
|
Re: SSL configuration question
by Selvaratnam Uthaiyashankar
::
Rate this Message:
Hi George,
Everything looks fine... I am not sure what the problem is.. As a final step, could you clear everything, (delete /usr/local/axis2c as well) and build again. Also, can you send full output of configure, make, make install? Regards, Shankar On Fri, Oct 2, 2009 at 7:18 PM, <gsherwood@...> wrote: > Hi Shankar, > Here you go -- > George > > #The LD_LIBRARY_PATH has not been changed. > > echo $LD_LIBRARY_PATH > :/usr/local/axis2c/lib/ > > cd /home/gbs/axis2c/axis2c-src-1.6.0/samples/client/echo > ldd ./echo > libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 (0x0064a000) > libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 > (0x00111000) > libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 > (0x00136000) > libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 > (0x00191000) > libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) > libaxis2_http_sender.so.0 => > /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00197000) > libaxis2_http_receiver.so.0 => > /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x001af000) > libdl.so.2 => /lib/libdl.so.2 (0x009cd000) > libc.so.6 => /lib/tls/libc.so.6 (0x00877000) > libz.so.1 => /usr/lib/libz.so.1 (0x00ac4000) > libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 (0x001b3000) > libaxis2_http_common.so.0 => > /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x001d0000) > libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 > (0x001e5000) > /lib/ld-linux.so.2 (0x00859000) > libssl.so.4 => /lib/libssl.so.4 (0x0072f000) > libcrypto.so.4 => /lib/libcrypto.so.4 (0x001f0000) > libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) > libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00569000) > libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) > libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) > libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) > > cd /home/gbs/axis2c/axis2c-src-1.6.0/docs/docs/hello/client > ldd ./hello > libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 (0x00111000) > libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 > (0x00aaa000) > libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 > (0x00d77000) > libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 > (0x0029a000) > libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) > libaxis2_http_sender.so.0 => > /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00596000) > libaxis2_http_receiver.so.0 => > /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x00cb1000) > libdl.so.2 => /lib/libdl.so.2 (0x009cd000) > libc.so.6 => /lib/tls/libc.so.6 (0x00877000) > libz.so.1 => /usr/lib/libz.so.1 (0x00130000) > libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 > (0x00d31000) > libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 (0x00543000) > libaxis2_http_common.so.0 => > /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x0022b000) > /lib/ld-linux.so.2 (0x00859000) > libssl.so.4 => /lib/libssl.so.4 (0x0072f000) > libcrypto.so.4 => /lib/libcrypto.so.4 (0x005d0000) > libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) > libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00140000) > libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) > libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) > libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) > > cd /usr/local/axis2c/lib > ldd libaxis2_http_common.so.0.6.0 > libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 > (0x00289000) > libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 > (0x00d92000) > libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 > (0x00e2d000) > libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 (0x001c9000) > libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00cf1000) > libz.so.1 => /usr/lib/libz.so.1 (0x00cb9000) > libdl.so.2 => /lib/libdl.so.2 (0x00b69000) > libc.so.6 => /lib/tls/libc.so.6 (0x002dd000) > /lib/ld-linux.so.2 (0x00859000) > > ldd libaxis2_http_receiver.so.0.6.0 > libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00d52000) > libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 (0x0051c000) > libaxis2_http_common.so.0 => > /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00ed8000) > libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 > (0x006a8000) > libz.so.1 => /usr/lib/libz.so.1 (0x00c4e000) > libdl.so.2 => /lib/libdl.so.2 (0x00111000) > libc.so.6 => /lib/tls/libc.so.6 (0x00115000) > /lib/ld-linux.so.2 (0x00859000) > libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 > (0x0082e000) > libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 > (0x0073a000) > libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 > (0x009c4000) > libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 (0x00cb4000) > > ldd libaxis2_http_sender.so.0.6.0 > libaxis2_http_common.so.0 => > /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00eb3000) > libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 > (0x00a21000) > libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 > (0x00ba7000) > libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00dc9000) > libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 > (0x004c9000) > libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 (0x002ef000) > libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 > (0x006df000) > libssl.so.4 => /lib/libssl.so.4 (0x0096a000) > libcrypto.so.4 => /lib/libcrypto.so.4 (0x00111000) > libz.so.1 => /usr/lib/libz.so.1 (0x00d2d000) > libdl.so.2 => /lib/libdl.so.2 (0x001fb000) > libc.so.6 => /lib/tls/libc.so.6 (0x0030e000) > /lib/ld-linux.so.2 (0x00859000) > libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 (0x00251000) > libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x001ff000) > libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x0026e000) > libcom_err.so.2 => /lib/libcom_err.so.2 (0x00dc4000) > libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00f18000) > libresolv.so.2 => /lib/libresolv.so.2 (0x00f68000) > > -------------- Forwarded Message: -------------- > From: Selvaratnam Uthaiyashankar <uthaiyashankar@...> > To: Apache AXIS C User List <axis-c-user@...> > Subject: Re: SSL configuration question > Date: Fri, 02 Oct 2009 02:31:20 +0000 > > > Hi, > > Do you have any other Axis2/C related library in your LD_LIBRARY_PATH? > If so, can you remove them or put ${AXIS2C_HOME}/lib/ as the first > entry in $LD_LIBRARY_PATH? > > Also, can you do "ldd and see what are the > libraries/paths link to client? > > Regards, > Shankar > > On Fri, Oct 2, 2009 at 1:04 AM, wrote: >> Shankar, >> Thank you for your help. I reconfigured as follows. >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0 >> su >> export AXIS2C_HOME=/usr/local/axis2c >> export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:${AXIS2C_HOME}/lib/ >> ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} >> --with-apache2="/usr/local/apache2/include" > config_out 2> config_err >> >> I found no errors or warnings in config_out; config_err was empty. I found >> no errors in the config.log file. The only warning seems to be unrelated: >> cc1: warning: command line option "-fno-rtti" is valid for C++/ObjC++ but >> not for C >> Relevant lines from config.log are: >> >> $ ./configure --enable-openssl=yes --prefix=/usr/local/axis2c >> --with-apache2=/usr/local/apache2/include >> ... >> configure:21638: checking whether to use openssl >> configure:21651: result: yes >> ... >> config.status:746: creating src/core/transport/http/sender/ssl/Makefile >> ... >> configure:23296: === configuring in util >> (/home/gbs/axis2c/axis2c-src-1.6.0/util) >> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >> --cache-file=/dev/null --srcdir=. >> configure:23296: === configuring in axiom >> (/home/gbs/axis2c/axis2c-src-1.6.0/axiom) >> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >> --cache-file=/dev/null --srcdir=. >> configure:23296: === configuring in neethi >> (/home/gbs/axis2c/axis2c-src-1.6.0/neethi) >> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >> --cache-file=/dev/null --srcdir=. >> configure:23296: === configuring in guththila >> (/home/gbs/axis2c/axis2c-src-1.6.0/guththila) >> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >> --cache-file=/dev/null --srcdir=. >> >> The diff command showed this config.log to be identical to that of the >> previous configure attempt. >> I appreciate your help with this. >> George >> >> -------------- Forwarded Message: -------------- >> From: Selvaratnam Uthaiyashankar >> To: Apache AXIS C User List >> Subject: Re: SSL configuration question >> Date: Thu, 01 Oct 2009 03:02:18 +0000 >> >> >> Hi, >> >> It seems Axis2/C engine (client side) is not configured with >> --enable-openssl=yes. Is there any errors when you configure? Can you >> configure with --enable-openssl=yes again and see? >> >> Regards, >> Shankar >> >> On Sun, Sep 27, 2009 at 8:14 AM, wrote: >>> I have been using axis2c-src-1.6.0 for a few days with an existing >>> service >>> running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as >>> an >>> Apache2 module. The samples and hello work with http transport, but I >>> have >>> not run https successfully with axis2 yet. The problem appears to be >>> similar >>> to that reported 2009-05-14 by chankm (Kwang Mien), but there does not >>> seem >>> to be a response to that message in the archive. Can anyone explain why >>> axis2c is not using https here? >>> Thanks for the help. >>> George Sherwood >>> >>> I am using a test system with a self-signed certificate. SSL is working >>> with >>> httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as expected >>> from a remote browser. However SSL does not appear to be configured >>> correctly for axis2. >>> >>> Both of the following commands seem to run OK. >>> ./echo http://64.232.245.115/axis2/services/echo >>> ./hello http://64.232.245.115/axis2/services/hello >>> >>> But the responses for the corresponding https endpoints do not. >>> ./echo https://64.232.245.115:443/axis2/services/echo >>> yields "echo client invoke FAILED!" >>> ./hello https://64.232.245.115:443/axis2/services/hello >>> yields "hello client invoke FAILED!" >>> >>> The echo.log contains the following lines. >>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport protocol >>> is >>> unsupported by axis2 >>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport >>> Protocol, HTTPS transport not enabled. >>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data stream >>> null or socket error for host 64.232.245.115 and 443 port >>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read >>> attempt(HTTP) >>> for the reply without sending the request >>> [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 >>> [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender invoke >>> failed >>> [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: Error >>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>> request >>> >>> And the hello_client.log contains the following lines. >>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport protocol >>> is >>> unsupported by axis2 >>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport >>> Protocol, HTTPS transport not enabled. >>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data stream >>> null or socket error for host 64.232.245.115 and 443 port >>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read >>> attempt(HTTP) >>> for the reply without sending the request >>> [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 >>> [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender invoke >>> failed >>> [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: Error >>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>> request >>> >>> Relevant lines from the axis2.xml file are: >>> >>> 443 >>> false >>> >>> ... >>> >>> HTTP/1.1 >>> >>> >>> >> name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt >>> >>> >>> Both the server module and SSL client were configured with openssl >>> enabled. >>> Details are available if needed. >>> >> >> >> >> -- >> S.Uthaiyashankar >> Software Architect >> WSO2 Inc. >> http://wso2.com/ - "The Open Source SOA Company" > > > > -- > S.Uthaiyashankar > Software Architect > WSO2 Inc. > http://wso2.com/ - "The Open Source SOA Company" -- S.Uthaiyashankar Software Architect WSO2 Inc. http://wso2.com/ - "The Open Source SOA Company" |
|
|
|
|
|
Re: SSL configuration question
by Selvaratnam Uthaiyashankar
::
Rate this Message:
hi George,
It seems, make is not compiling any source, so I think the options given in configure is not used. This might be due to configuring without --enable-openssl=yes option, and compiling it (so it has all *.o file newer than source file), then configure with --enable-openssl option. And then when you give the option, even though it configured correctly, it didn't compile any source file (see the portion I took from your make output. It just says, nothing to be done.) It just links again, but what we really want is to compile the source codes. Can you do "make distclean" (which will clear all generated files) and then configure, make, make install? Regards, Shankar ================Make output ============ make[4]: Nothing to be done for `install-data-am'. make[4]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/engine' make[3]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/engine' Making install in transport make[3]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport' Making install in http make[4]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http' Making install in sender make[5]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' Making install in ssl make[6]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' make[7]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' make[7]: Nothing to be done for `install-exec-am'. make[7]: Nothing to be done for `install-data-am'. make[7]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' make[6]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' Making install in libcurl make[6]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' make[7]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' make[7]: Nothing to be done for `install-exec-am'. make[7]: Nothing to be done for `install-data-am'. make[7]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' make[6]: Leaving directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' make[6]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' make[7]: Entering directory `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' test -z "/usr/local/axis2c/lib" || /bin/mkdir -p "/usr/local/axis2c/lib" /bin/sh ../../../../../libtool --mode=install /usr/bin/install -c 'libaxis2_http_sender.la' '/usr/local/axis2c/lib/libaxis2_http_sender.la' (cd /home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender; /bin/sh ../../../../../libtool --tag=CC --mode=relink gcc -g -O2 -D_LARGEFILE64_SOURCE -ansi -Wall -Werror -Wno-implicit-function-declaration -g -D_GNU_SOURCE -DAXIS2_GUTHTHILA_ENABLED -DAXIS2_SVR_MULTI_THREADED -DAXIS2_SSL_ENABLED -version-info 6:0:6 -lpthread -o libaxis2_http_sender.la -rpath /usr/local/axis2c/lib http_transport_sender.lo http_sender.lo http_client.lo ssl_stream.lo ssl_utils.lo ../../../../../src/core/transport/http/common/libaxis2_http_common.la ../../../../../src/core/transport/http/util/libaxis2_http_util.la ../../../../../axiom/src/om/libaxis2_axiom.la ../../../../../util/src/libaxutil.la ../../../../../src/core/engine/libaxis2_engine.la -lssl -lcrypto -lz -ldl ) gcc -shared .libs/http_transport_sender.o .libs/http_sender.o .libs/http_client.o .libs/ssl_stream.o .libs/ssl_utils.o -Wl,--whole-archive ../../../../../src/core/transport/http/util/.libs/libaxis2_http_util.a -Wl,--no-whole-archive -Wl,--rpath -Wl,/usr/local/axis2c/lib -L/usr/local/axis2c/lib -laxis2_http_common -laxis2_parser -lguththila -lpthread -laxis2_axiom -laxutil -laxis2_engine -lssl -lcrypto -lz -ldl -Wl,-soname -Wl,libaxis2_http_sender.so.0 -o .libs/libaxis2_http_sender.so.0.6.0 /usr/bin/install -c .libs/libaxis2_http_sender.so.0.6.0T /usr/local/axis2c/lib/libaxis2_http_sender.so.0.6.0 (cd /usr/local/axis2c/lib && { ln -s -f libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so.0 || { rm -f libaxis2_http_sender.so.0 && ln -s libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so.0; }; }) (cd /usr/local/axis2c/lib && { ln -s -f libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so || { rm -f libaxis2_http_sender.so && ln -s libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so; }; }) /usr/bin/install -c .libs/libaxis2_http_sender.lai /usr/local/axis2c/lib/libaxis2_http_sender.la /usr/bin/install -c .libs/libaxis2_http_sender.a /usr/local/axis2c/lib/libaxis2_http_sender.a chmod 644 /usr/local/axis2c/lib/libaxis2_http_sender.a ranlib /usr/local/axis2c/lib/libaxis2_http_sender.a PATH="$PATH:/sbin" ldconfig -n /usr/local/axis2c/lib ---------------------------------------------------------------------- ===========end make output==================== On Fri, Oct 2, 2009 at 10:37 PM, <gsherwood@...> wrote: > Hi Shankar, > The steps I took to rebuild are below. Files config_out, make_out, > make_install_out and axis2-hq-test.xml (axis2.xml) are attached. The files > config_err, make_err, make_install_err are empty. As you will see, I also > rebuilt the samples and found that the ssl problem persists. > Regards, > George > > rm -r -f /usr/local/axis2c > > echo $AXIS2C_HOME > /usr/local/axis2c > > echo $LD_LIBRARY_PATH > :/usr/local/axis2c/lib/ > > cd /home/gbs/axis2c/axis2c-src-1.6.0 > > ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} > --with-apache2="/usr/local/apache2/include" > config_out 2> config_err > > make > make_out 2> make_err > > make install > make_install_out 2> make_install_err > > cp ${AXIS2C_HOME}/lib/libmod_axis2.so.0.6.0 > /usr/local/apache2/modules/mod_axis2.so > > cp /home/gbs/axis2-hq-test.xml /usr/local/axis2c/axis2.xml > > cd /home/gbs/axis2c/axis2c-src-1.6.0/samples > > ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} > --with-axis2=${AXIS2C_HOME}/include/axis2-1.6.0 > config_samples_out 2> > config_samples_err > > make > make_samples_out 2> make_samples_err > > make install > make_install_samples_out 2> make_install_samples_err > > /usr/local/apache2/bin/apachectl startssl > > cd /home/gbs/axis2c/axis2c-src-1.6.0/samples/client/echo > > ./echo http://64.232.245.115/axis2/services/echo > Using endpoint : http://64.232.245.115/axis2/services/echo > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > > Received OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/c/samples"><text>Hello > World!</text></ns1:echoString> > > echo client invoke SUCCESSFUL! > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > > Received OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/c/samples"><text>Hello > World!</text></ns1:echoString> > > echo client invoke SUCCESSFUL! > > ./echo https://64.232.245.115:443/axis2/services/echo > Using endpoint : https://64.232.245.115:443/axis2/services/echo > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > echo client invoke FAILED! > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > echo client invoke FAILED! > > -------------- Forwarded Message: -------------- > From: Selvaratnam Uthaiyashankar <uthaiyashankar@...> > To: Apache AXIS C User List <axis-c-user@...> > Subject: Re: SSL configuration question > Date: Fri, 02 Oct 2009 14:39:51 +0000 > > > Hi George, > > Everything looks fine... I am not sure what the problem is.. > > As a final step, could you clear everything, (delete /usr/local/axis2c > as well) and build again. Also, can you send full output of configure, > make, make install? > > Regards, > Shankar > > On Fri, Oct 2, 2009 at 7:18 PM, wrote: >> Hi Shankar, >> Here you go -- >> George >> >> #The LD_LIBRARY_PATH has not been changed. >> >> echo $LD_LIBRARY_PATH >> :/usr/local/axis2c/lib/ >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0/samples/client/echo >> ldd ./echo >> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >> (0x0064a000) >> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >> (0x00111000) >> libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 >> (0x00136000) >> libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 >> (0x00191000) >> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) >> libaxis2_http_sender.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00197000) >> libaxis2_http_receiver.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x001af000) >> libdl.so.2 => /lib/libdl.so.2 (0x009cd000) >> libc.so.6 => /lib/tls/libc.so.6 (0x00877000) >> libz.so.1 => /usr/lib/libz.so.1 (0x00ac4000) >> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >> (0x001b3000) >> libaxis2_http_common.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x001d0000) >> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >> (0x001e5000) >> /lib/ld-linux.so.2 (0x00859000) >> libssl.so.4 => /lib/libssl.so.4 (0x0072f000) >> libcrypto.so.4 => /lib/libcrypto.so.4 (0x001f0000) >> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) >> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00569000) >> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) >> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) >> libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0/docs/docs/hello/client >> ldd ./hello >> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >> (0x00111000) >> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >> (0x00aaa000) >> libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 >> (0x00d77000) >> libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 >> (0x0029a000) >> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) >> libaxis2_http_sender.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00596000) >> libaxis2_http_receiver.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x00cb1000) >> libdl.so.2 => /lib/libdl.so.2 (0x009cd000) >> libc.so.6 => /lib/tls/libc.so.6 (0x00877000) >> libz.so.1 => /usr/lib/libz.so.1 (0x00130000) >> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >> (0x00d31000) >> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >> (0x00543000) >> libaxis2_http_common.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x0022b000) >> /lib/ld-linux.so.2 (0x00859000) >> libssl.so.4 => /lib/libssl.so.4 (0x0072f000) >> libcrypto.so.4 => /lib/libcrypto.so.4 (0x005d0000) >> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) >> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00140000) >> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) >> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) >> libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) >> >> cd /usr/local/axis2c/lib >> ldd libaxis2_http_common.so.0.6.0 >> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >> (0x00289000) >> libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 >> (0x00d92000) >> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >> (0x00e2d000) >> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >> (0x001c9000) >> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00cf1000) >> libz.so.1 => /usr/lib/libz.so.1 (0x00cb9000) >> libdl.so.2 => /lib/libdl.so.2 (0x00b69000) >> libc.so.6 => /lib/tls/libc.so.6 (0x002dd000) >> /lib/ld-linux.so.2 (0x00859000) >> >> ldd libaxis2_http_receiver.so.0.6.0 >> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00d52000) >> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >> (0x0051c000) >> libaxis2_http_common.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00ed8000) >> libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 >> (0x006a8000) >> libz.so.1 => /usr/lib/libz.so.1 (0x00c4e000) >> libdl.so.2 => /lib/libdl.so.2 (0x00111000) >> libc.so.6 => /lib/tls/libc.so.6 (0x00115000) >> /lib/ld-linux.so.2 (0x00859000) >> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >> (0x0082e000) >> libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 >> (0x0073a000) >> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >> (0x009c4000) >> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >> (0x00cb4000) >> >> ldd libaxis2_http_sender.so.0.6.0 >> libaxis2_http_common.so.0 => >> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00eb3000) >> libaxis2_parser.so.0 => /usr/local/axis2c/lib/libaxis2_parser.so.0 >> (0x00a21000) >> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >> (0x00ba7000) >> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00dc9000) >> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >> (0x004c9000) >> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >> (0x002ef000) >> libaxis2_engine.so.0 => /usr/local/axis2c/lib/libaxis2_engine.so.0 >> (0x006df000) >> libssl.so.4 => /lib/libssl.so.4 (0x0096a000) >> libcrypto.so.4 => /lib/libcrypto.so.4 (0x00111000) >> libz.so.1 => /usr/lib/libz.so.1 (0x00d2d000) >> libdl.so.2 => /lib/libdl.so.2 (0x001fb000) >> libc.so.6 => /lib/tls/libc.so.6 (0x0030e000) >> /lib/ld-linux.so.2 (0x00859000) >> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >> (0x00251000) >> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x001ff000) >> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x0026e000) >> libcom_err.so.2 => /lib/libcom_err.so.2 (0x00dc4000) >> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00f18000) >> libresolv.so.2 => /lib/libresolv.so.2 (0x00f68000) >> >> -------------- Forwarded Message: -------------- >> From: Selvaratnam Uthaiyashankar >> To: Apache AXIS C User List >> Subject: Re: SSL configuration question >> Date: Fri, 02 Oct 2009 02:31:20 +0000 >> >> >> Hi, >> >> Do you have any other Axis2/C related library in your LD_LIBRARY_PATH? >> If so, can you remove them or put ${AXIS2C_HOME}/lib/ as the first >> entry in $LD_LIBRARY_PATH? >> >> Also, can you do "ldd and see what are the >> libraries/paths link to client? >> >> Regards, >> Shankar >> >> On Fri, Oct 2, 2009 at 1:04 AM, wrote: >>> Shankar, >>> Thank you for your help. I reconfigured as follows. >>> >>> cd /home/gbs/axis2c/axis2c-src-1.6.0 >>> su >>> export AXIS2C_HOME=/usr/local/axis2c >>> export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:${AXIS2C_HOME}/lib/ >>> ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} >>> --with-apache2="/usr/local/apache2/include" > config_out 2> config_err >>> >>> I found no errors or warnings in config_out; config_err was empty. I >>> found >>> no errors in the config.log file. The only warning seems to be unrelated: >>> cc1: warning: command line option "-fno-rtti" is valid for C++/ObjC++ but >>> not for C >>> Relevant lines from config.log are: >>> >>> $ ./configure --enable-openssl=yes --prefix=/usr/local/axis2c >>> --with-apache2=/usr/local/apache2/include >>> ... >>> configure:21638: checking whether to use openssl >>> configure:21651: result: yes >>> ... >>> config.status:746: creating src/core/transport/http/sender/ssl/Makefile >>> ... >>> configure:23296: === configuring in util >>> (/home/gbs/axis2c/axis2c-src-1.6.0/util) >>> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>> --cache-file=/dev/null --srcdir=. >>> configure:23296: === configuring in axiom >>> (/home/gbs/axis2c/axis2c-src-1.6.0/axiom) >>> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>> --cache-file=/dev/null --srcdir=. >>> configure:23296: === configuring in neethi >>> (/home/gbs/axis2c/axis2c-src-1.6.0/neethi) >>> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>> --cache-file=/dev/null --srcdir=. >>> configure:23296: === configuring in guththila >>> (/home/gbs/axis2c/axis2c-src-1.6.0/guththila) >>> configure:23399: running /bin/sh ./configure '--prefix=/usr/local/axis2c' >>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>> --cache-file=/dev/null --srcdir=. >>> >>> The diff command showed this config.log to be identical to that of the >>> previous configure attempt. >>> I appreciate your help with this. >>> George >>> >>> -------------- Forwarded Message: -------------- >>> From: Selvaratnam Uthaiyashankar >>> To: Apache AXIS C User List >>> Subject: Re: SSL configuration question >>> Date: Thu, 01 Oct 2009 03:02:18 +0000 >>> >>> >>> Hi, >>> >>> It seems Axis2/C engine (client side) is not configured with >>> --enable-openssl=yes. Is there any errors when you configure? Can you >>> configure with --enable-openssl=yes again and see? >>> >>> Regards, >>> Shankar >>> >>> On Sun, Sep 27, 2009 at 8:14 AM, wrote: >>>> I have been using axis2c-src-1.6.0 for a few days with an existing >>>> service >>>> running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as >>>> an >>>> Apache2 module. The samples and hello work with http transport, but I >>>> have >>>> not run https successfully with axis2 yet. The problem appears to be >>>> similar >>>> to that reported 2009-05-14 by chankm (Kwang Mien), but there does not >>>> seem >>>> to be a response to that message in the archive. Can anyone explain why >>>> axis2c is not using https here? >>>> Thanks for the help. >>>> George Sherwood >>>> >>>> I am using a test system with a self-signed certificate. SSL is working >>>> with >>>> httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as >>>> expected >>>> from a remote browser. However SSL does not appear to be configured >>>> correctly for axis2. >>>> >>>> Both of the following commands seem to run OK. >>>> ./echo http://64.232.245.115/axis2/services/echo >>>> ./hello http://64.232.245.115/axis2/services/hello >>>> >>>> But the responses for the corresponding https endpoints do not. >>>> ./echo https://64.232.245.115:443/axis2/services/echo >>>> yields "echo client invoke FAILED!" >>>> ./hello https://64.232.245.115:443/axis2/services/hello >>>> yields "hello client invoke FAILED!" >>>> >>>> The echo.log contains the following lines. >>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport protocol >>>> is >>>> unsupported by axis2 >>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport >>>> Protocol, HTTPS transport not enabled. >>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data stream >>>> null or socket error for host 64.232.245.115 and 443 port >>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read >>>> attempt(HTTP) >>>> for the reply without sending the request >>>> [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 >>>> [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender invoke >>>> failed >>>> [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: Error >>>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>>> request >>>> >>>> And the hello_client.log contains the following lines. >>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport protocol >>>> is >>>> unsupported by axis2 >>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport >>>> Protocol, HTTPS transport not enabled. >>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data stream >>>> null or socket error for host 64.232.245.115 and 443 port >>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read >>>> attempt(HTTP) >>>> for the reply without sending the request >>>> [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 >>>> [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender invoke >>>> failed >>>> [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: Error >>>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>>> request >>>> >>>> Relevant lines from the axis2.xml file are: >>>> >>>> 443 >>>> false >>>> >>>> ... >>>> >>>> HTTP/1.1 >>>> >>>> >>>> >>> name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt >>>> >>>> >>>> Both the server module and SSL client were configured with openssl >>>> enabled. >>>> Details are available if needed. >>>> >>> >>> >>> >>> -- >>> S.Uthaiyashankar >>> Software Architect >>> WSO2 Inc. >>> http://wso2.com/ - "The Open Source SOA Company" >> >> >> >> -- >> S.Uthaiyashankar >> Software Architect >> WSO2 Inc. >> http://wso2.com/ - "The Open Source SOA Company" > > > > -- > S.Uthaiyashankar > Software Architect > WSO2 Inc. > http://wso2.com/ - "The Open Source SOA Company" -- S.Uthaiyashankar Software Architect WSO2 Inc. http://wso2.com/ - "The Open Source SOA Company" |
|
|
|
|
|
Re: SSL configuration question
by Selvaratnam Uthaiyashankar
::
Rate this Message:
Hi Geroge,
Happy to hear you got it working. I'll resolve the issue. Regards, Shankar On Sat, Oct 3, 2009 at 10:20 PM, <gsherwood@...> wrote: > Hi Shankar, > Using make distclean fixed the problem, as shown below. By the way, I > reported the problem in JIRA a few days ago -- (AXIS2C-1399) Invalid > Transport Protocol, HTTPS transport not enabled on Linux. It seems to me > that the issue should be closed, or moved from the transport/http component > to a more appropriate one. > Thank you again for your help. > George > > ./echo https://64.232.245.115:443/axis2/services/echo > Using endpoint : https://64.232.245.115:443/axis2/services/echo > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > > Received OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/c/samples"><text>Hello > World!</text></ns1:echoString> > > echo client invoke SUCCESSFUL! > > Sending OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/services/echo"><text>Hello > World!</text></ns1:echoString> > > Received OM : <ns1:echoString > xmlns:ns1="http://ws.apache.org/axis2/c/samples"><text>Hello > World!</text></ns1:echoString> > > echo client invoke SUCCESSFUL! > > -------------- Forwarded Message: -------------- > From: Selvaratnam Uthaiyashankar <uthaiyashankar@...> > To: Apache AXIS C User List <axis-c-user@...> > Subject: Re: SSL configuration question > Date: Sat, 03 Oct 2009 12:42:21 +0000 > > > hi George, > > It seems, make is not compiling any source, so I think the options > given in configure is not used. This might be due to configuring > without --enable-openssl=yes option, and compiling it (so it has all > *.o file newer than source file), then configure with --enable-openssl > option. And then when you give the option, even though it configured > correctly, it didn't compile any source file (see the portion I took > from your make output. It just says, nothing to be done.) It just > links again, but what we really want is to compile the source codes. > Can you do "make distclean" (which will clear all generated files) and > then configure, make, make install? > > Regards, > Shankar > > ================Make output ============ > make[4]: Nothing to be done for `install-data-am'. > make[4]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/engine' > make[3]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/engine' > Making install in transport > make[3]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport' > Making install in http > make[4]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http' > Making install in sender > make[5]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' > Making install in ssl > make[6]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' > make[7]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' > make[7]: Nothing to be done for `install-exec-am'. > make[7]: Nothing to be done for `install-data-am'. > make[7]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' > make[6]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/ssl' > Making install in libcurl > make[6]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' > make[7]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' > make[7]: Nothing to be done for `install-exec-am'. > make[7]: Nothing to be done for `install-data-am'. > make[7]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' > make[6]: Leaving directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender/libcurl' > make[6]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' > make[7]: Entering directory > `/home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender' > test -z "/usr/local/axis2c/lib" || /bin/mkdir -p "/usr/local/axis2c/lib" > /bin/sh ../../../../../libtool --mode=install /usr/bin/install -c > 'libaxis2_http_sender.la' > '/usr/local/axis2c/lib/libaxis2_http_sender.la' > (cd /home/gbs/axis2c/axis2c-src-1.6.0/src/core/transport/http/sender; > /bin/sh ../../../../../libtool --tag=CC --mode=relink gcc -g -O2 > -D_LARGEFILE64_SOURCE -ansi -Wall -Werror > -Wno-implicit-function-declaration -g -D_GNU_SOURCE > -DAXIS2_GUTHTHILA_ENABLED -DAXIS2_SVR_MULTI_THREADED > -DAXIS2_SSL_ENABLED -version-info 6:0:6 -lpthread -o > libaxis2_http_sender.la -rpath /usr/local/axis2c/lib > http_transport_sender.lo http_sender.lo http_client.lo ssl_stream.lo > ssl_utils.lo > ../../../../../src/core/transport/http/common/libaxis2_http_common.la > ../../../../../src/core/transport/http/util/libaxis2_http_util.la > ../../../../../axiom/src/om/libaxis2_axiom.la > ../../../../../util/src/libaxutil.la > ../../../../../src/core/engine/libaxis2_engine.la -lssl -lcrypto -lz > -ldl ) > gcc -shared .libs/http_transport_sender.o .libs/http_sender.o > .libs/http_client.o .libs/ssl_stream.o .libs/ssl_utils.o > -Wl,--whole-archive > ../../../../../src/core/transport/http/util/.libs/libaxis2_http_util.a > -Wl,--no-whole-archive -Wl,--rpath -Wl,/usr/local/axis2c/lib > -L/usr/local/axis2c/lib -laxis2_http_common -laxis2_parser -lguththila > -lpthread -laxis2_axiom -laxutil -laxis2_engine -lssl -lcrypto -lz > -ldl -Wl,-soname -Wl,libaxis2_http_sender.so.0 -o > .libs/libaxis2_http_sender.so.0.6.0 > /usr/bin/install -c .libs/libaxis2_http_sender.so.0.6.0T > /usr/local/axis2c/lib/libaxis2_http_sender.so.0.6.0 > (cd /usr/local/axis2c/lib && { ln -s -f libaxis2_http_sender.so.0.6.0 > libaxis2_http_sender.so.0 || { rm -f libaxis2_http_sender.so.0 && ln > -s libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so.0; }; }) > (cd /usr/local/axis2c/lib && { ln -s -f libaxis2_http_sender.so.0.6.0 > libaxis2_http_sender.so || { rm -f libaxis2_http_sender.so && ln -s > libaxis2_http_sender.so.0.6.0 libaxis2_http_sender.so; }; }) > /usr/bin/install -c .libs/libaxis2_http_sender.lai > /usr/local/axis2c/lib/libaxis2_http_sender.la > /usr/bin/install -c .libs/libaxis2_http_sender.a > /usr/local/axis2c/lib/libaxis2_http_sender.a > chmod 644 /usr/local/axis2c/lib/libaxis2_http_sender.a > ranlib /usr/local/axis2c/lib/libaxis2_http_sender.a > PATH="$PATH:/sbin" ldconfig -n /usr/local/axis2c/lib > ---------------------------------------------------------------------- > > ===========end make output==================== > > On Fri, Oct 2, 2009 at 10:37 PM, wrote: >> Hi Shankar, >> The steps I took to rebuild are below. Files config_out, make_out, >> make_install_out and axis2-hq-test.xml (axis2.xml) are attached. The files >> config_err, make_err, make_install_err are empty. As you will see, I also >> rebuilt the samples and found that the ssl problem persists. >> Regards, >> George >> >> rm -r -f /usr/local/axis2c >> >> echo $AXIS2C_HOME >> /usr/local/axis2c >> >> echo $LD_LIBRARY_PATH >> :/usr/local/axis2c/lib/ >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0 >> >> ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} >> --with-apache2="/usr/local/apache2/include" > config_out 2> config_err >> >> make > make_out 2> make_err >> >> make install > make_install_out 2> make_install_err >> >> cp ${AXIS2C_HOME}/lib/libmod_axis2.so.0.6.0 >> /usr/local/apache2/modules/mod_axis2.so >> >> cp /home/gbs/axis2-hq-test.xml /usr/local/axis2c/axis2.xml >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0/samples >> >> ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} >> --with-axis2=${AXIS2C_HOME}/include/axis2-1.6.0 > config_samples_out 2> >> config_samples_err >> >> make > make_samples_out 2> make_samples_err >> >> make install > make_install_samples_out 2> make_install_samples_err >> >> /usr/local/apache2/bin/apachectl startssl >> >> cd /home/gbs/axis2c/axis2c-src-1.6.0/samples/client/echo >> >> ./echo http://64.232.245.115/axis2/services/echo >> Using endpoint : http://64.232.245.115/axis2/services/echo >> >> Sending OM : >> xmlns:ns1="http://ws.apache.org/axis2/services/echo">Hello >> World! >> >> Received OM : >> xmlns:ns1="http://ws.apache.org/axis2/c/samples">Hello >> World! >> >> echo client invoke SUCCESSFUL! >> >> Sending OM : >> xmlns:ns1="http://ws.apache.org/axis2/services/echo">Hello >> World! >> >> Received OM : >> xmlns:ns1="http://ws.apache.org/axis2/c/samples">Hello >> World! >> >> echo client invoke SUCCESSFUL! >> >> ./echo https://64.232.245.115:443/axis2/services/echo >> Using endpoint : https://64.232.245.115:443/axis2/services/echo >> >> Sending OM : >> xmlns:ns1="http://ws.apache.org/axis2/services/echo">Hello >> World! >> echo client invoke FAILED! >> >> Sending OM : >> xmlns:ns1="http://ws.apache.org/axis2/services/echo">Hello >> World! >> echo client invoke FAILED! >> >> -------------- Forwarded Message: -------------- >> From: Selvaratnam Uthaiyashankar >> To: Apache AXIS C User List >> Subject: Re: SSL configuration question >> Date: Fri, 02 Oct 2009 14:39:51 +0000 >> >> >> Hi George, >> >> Everything looks fine... I am not sure what the problem is.. >> >> As a final step, could you clear everything, (delete /usr/local/axis2c >> as well) and build again. Also, can you send full output of configure, >> make, make install? >> >> Regards, >> Shankar >> >> On Fri, Oct 2, 2009 at 7:18 PM, wrote: >>> Hi Shankar, >>> Here you go -- >>> George >>> >>> #The LD_LIBRARY_PATH has not been changed. >>> >>> echo $LD_LIBRARY_PATH >>> :/usr/local/axis2c/lib/ >>> >>> cd /home/gbs/axis2c/axis2c-src-1.6.0/samples/client/echo >>> ldd ./echo >>> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >>> (0x0064a000) >>> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >>> (0x00111000) >>> libaxis2_engine.so.0 => >>> /usr/local/axis2c/lib/libaxis2_engine.so.0 >>> (0x00136000) >>> libaxis2_parser.so.0 => >>> /usr/local/axis2c/lib/libaxis2_parser.so.0 >>> (0x00191000) >>> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) >>> libaxis2_http_sender.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00197000) >>> libaxis2_http_receiver.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x001af000) >>> libdl.so.2 => /lib/libdl.so.2 (0x009cd000) >>> libc.so.6 => /lib/tls/libc.so.6 (0x00877000) >>> libz.so.1 => /usr/lib/libz.so.1 (0x00ac4000) >>> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >>> (0x001b3000) >>> libaxis2_http_common.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x001d0000) >>> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >>> (0x001e5000) >>> /lib/ld-linux.so.2 (0x00859000) >>> libssl.so.4 => /lib/libssl.so.4 (0x0072f000) >>> libcrypto.so.4 => /lib/libcrypto.so.4 (0x001f0000) >>> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) >>> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00569000) >>> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) >>> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) >>> libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) >>> >>> cd /home/gbs/axis2c/axis2c-src-1.6.0/docs/docs/hello/client >>> ldd ./hello >>> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >>> (0x00111000) >>> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >>> (0x00aaa000) >>> libaxis2_parser.so.0 => >>> /usr/local/axis2c/lib/libaxis2_parser.so.0 >>> (0x00d77000) >>> libaxis2_engine.so.0 => >>> /usr/local/axis2c/lib/libaxis2_engine.so.0 >>> (0x0029a000) >>> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00ad6000) >>> libaxis2_http_sender.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_sender.so.0 (0x00596000) >>> libaxis2_http_receiver.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_receiver.so.0 (0x00cb1000) >>> libdl.so.2 => /lib/libdl.so.2 (0x009cd000) >>> libc.so.6 => /lib/tls/libc.so.6 (0x00877000) >>> libz.so.1 => /usr/lib/libz.so.1 (0x00130000) >>> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >>> (0x00d31000) >>> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >>> (0x00543000) >>> libaxis2_http_common.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x0022b000) >>> /lib/ld-linux.so.2 (0x00859000) >>> libssl.so.4 => /lib/libssl.so.4 (0x0072f000) >>> libcrypto.so.4 => /lib/libcrypto.so.4 (0x005d0000) >>> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x006bc000) >>> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00140000) >>> libcom_err.so.2 => /lib/libcom_err.so.2 (0x004be000) >>> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x004c3000) >>> libresolv.so.2 => /lib/libresolv.so.2 (0x00c75000) >>> >>> cd /usr/local/axis2c/lib >>> ldd libaxis2_http_common.so.0.6.0 >>> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >>> (0x00289000) >>> libaxis2_parser.so.0 => >>> /usr/local/axis2c/lib/libaxis2_parser.so.0 >>> (0x00d92000) >>> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >>> (0x00e2d000) >>> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >>> (0x001c9000) >>> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00cf1000) >>> libz.so.1 => /usr/lib/libz.so.1 (0x00cb9000) >>> libdl.so.2 => /lib/libdl.so.2 (0x00b69000) >>> libc.so.6 => /lib/tls/libc.so.6 (0x002dd000) >>> /lib/ld-linux.so.2 (0x00859000) >>> >>> ldd libaxis2_http_receiver.so.0.6.0 >>> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00d52000) >>> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >>> (0x0051c000) >>> libaxis2_http_common.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00ed8000) >>> libaxis2_engine.so.0 => >>> /usr/local/axis2c/lib/libaxis2_engine.so.0 >>> (0x006a8000) >>> libz.so.1 => /usr/lib/libz.so.1 (0x00c4e000) >>> libdl.so.2 => /lib/libdl.so.2 (0x00111000) >>> libc.so.6 => /lib/tls/libc.so.6 (0x00115000) >>> /lib/ld-linux.so.2 (0x00859000) >>> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >>> (0x0082e000) >>> libaxis2_parser.so.0 => >>> /usr/local/axis2c/lib/libaxis2_parser.so.0 >>> (0x0073a000) >>> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >>> (0x009c4000) >>> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >>> (0x00cb4000) >>> >>> ldd libaxis2_http_sender.so.0.6.0 >>> libaxis2_http_common.so.0 => >>> /usr/local/axis2c/lib/libaxis2_http_common.so.0 (0x00eb3000) >>> libaxis2_parser.so.0 => >>> /usr/local/axis2c/lib/libaxis2_parser.so.0 >>> (0x00a21000) >>> libguththila.so.0 => /usr/local/axis2c/lib/libguththila.so.0 >>> (0x00ba7000) >>> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00dc9000) >>> libaxis2_axiom.so.0 => /usr/local/axis2c/lib/libaxis2_axiom.so.0 >>> (0x004c9000) >>> libaxutil.so.0 => /usr/local/axis2c/lib/libaxutil.so.0 >>> (0x002ef000) >>> libaxis2_engine.so.0 => >>> /usr/local/axis2c/lib/libaxis2_engine.so.0 >>> (0x006df000) >>> libssl.so.4 => /lib/libssl.so.4 (0x0096a000) >>> libcrypto.so.4 => /lib/libcrypto.so.4 (0x00111000) >>> libz.so.1 => /usr/lib/libz.so.1 (0x00d2d000) >>> libdl.so.2 => /lib/libdl.so.2 (0x001fb000) >>> libc.so.6 => /lib/tls/libc.so.6 (0x0030e000) >>> /lib/ld-linux.so.2 (0x00859000) >>> libneethi.so.0 => /usr/local/axis2c/lib/libneethi.so.0 >>> (0x00251000) >>> libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x001ff000) >>> libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x0026e000) >>> libcom_err.so.2 => /lib/libcom_err.so.2 (0x00dc4000) >>> libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00f18000) >>> libresolv.so.2 => /lib/libresolv.so.2 (0x00f68000) >>> >>> -------------- Forwarded Message: -------------- >>> From: Selvaratnam Uthaiyashankar >>> To: Apache AXIS C User List >>> Subject: Re: SSL configuration question >>> Date: Fri, 02 Oct 2009 02:31:20 +0000 >>> >>> >>> Hi, >>> >>> Do you have any other Axis2/C related library in your LD_LIBRARY_PATH? >>> If so, can you remove them or put ${AXIS2C_HOME}/lib/ as the first >>> entry in $LD_LIBRARY_PATH? >>> >>> Also, can you do "ldd and see what are the >>> libraries/paths link to client? >>> >>> Regards, >>> Shankar >>> >>> On Fri, Oct 2, 2009 at 1:04 AM, wrote: >>>> Shankar, >>>> Thank you for your help. I reconfigured as follows. >>>> >>>> cd /home/gbs/axis2c/axis2c-src-1.6.0 >>>> su >>>> export AXIS2C_HOME=/usr/local/axis2c >>>> export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:${AXIS2C_HOME}/lib/ >>>> ./configure --enable-openssl=yes --prefix=${AXIS2C_HOME} >>>> --with-apache2="/usr/local/apache2/include" > config_out 2> config_err >>>> >>>> I found no errors or warnings in config_out; config_err was empty. I >>>> found >>>> no errors in the config.log file. The only warning seems to be >>>> unrelated: >>>> cc1: warning: command line option "-fno-rtti" is valid for C++/ObjC++ >>>> but >>>> not for C >>>> Relevant lines from config.log are: >>>> >>>> $ ./configure --enable-openssl=yes --prefix=/usr/local/axis2c >>>> --with-apache2=/usr/local/apache2/include >>>> ... >>>> configure:21638: checking whether to use openssl >>>> configure:21651: result: yes >>>> ... >>>> config.status:746: creating src/core/transport/http/sender/ssl/Makefile >>>> ... >>>> configure:23296: === configuring in util >>>> (/home/gbs/axis2c/axis2c-src-1.6.0/util) >>>> configure:23399: running /bin/sh ./configure >>>> '--prefix=/usr/local/axis2c' >>>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>>> --cache-file=/dev/null --srcdir=. >>>> configure:23296: === configuring in axiom >>>> (/home/gbs/axis2c/axis2c-src-1.6.0/axiom) >>>> configure:23399: running /bin/sh ./configure >>>> '--prefix=/usr/local/axis2c' >>>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>>> --cache-file=/dev/null --srcdir=. >>>> configure:23296: === configuring in neethi >>>> (/home/gbs/axis2c/axis2c-src-1.6.0/neethi) >>>> configure:23399: running /bin/sh ./configure >>>> '--prefix=/usr/local/axis2c' >>>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>>> --cache-file=/dev/null --srcdir=. >>>> configure:23296: === configuring in guththila >>>> (/home/gbs/axis2c/axis2c-src-1.6.0/guththila) >>>> configure:23399: running /bin/sh ./configure >>>> '--prefix=/usr/local/axis2c' >>>> '--enable-openssl=yes' '--with-apache2=/usr/local/apache2/include' >>>> --cache-file=/dev/null --srcdir=. >>>> >>>> The diff command showed this config.log to be identical to that of the >>>> previous configure attempt. >>>> I appreciate your help with this. >>>> George >>>> >>>> -------------- Forwarded Message: -------------- >>>> From: Selvaratnam Uthaiyashankar >>>> To: Apache AXIS C User List >>>> Subject: Re: SSL configuration question >>>> Date: Thu, 01 Oct 2009 03:02:18 +0000 >>>> >>>> >>>> Hi, >>>> >>>> It seems Axis2/C engine (client side) is not configured with >>>> --enable-openssl=yes. Is there any errors when you configure? Can you >>>> configure with --enable-openssl=yes again and see? >>>> >>>> Regards, >>>> Shankar >>>> >>>> On Sun, Sep 27, 2009 at 8:14 AM, wrote: >>>>> I have been using axis2c-src-1.6.0 for a few days with an existing >>>>> service >>>>> running Red Hat EL 4.7 and Apache2 httpd-2.0.63. Axis2/C is deployed as >>>>> an >>>>> Apache2 module. The samples and hello work with http transport, but I >>>>> have >>>>> not run https successfully with axis2 yet. The problem appears to be >>>>> similar >>>>> to that reported 2009-05-14 by chankm (Kwang Mien), but there does not >>>>> seem >>>>> to be a response to that message in the archive. Can anyone explain why >>>>> axis2c is not using https here? >>>>> Thanks for the help. >>>>> George Sherwood >>>>> >>>>> I am using a test system with a self-signed certificate. SSL is working >>>>> with >>>>> httpd; e.g. https://64.232.245.115/pub/promos.php is accessed as >>>>> expected >>>>> from a remote browser. However SSL does not appear to be configured >>>>> correctly for axis2. >>>>> >>>>> Both of the following commands seem to run OK. >>>>> ./echo http://64.232.245.115/axis2/services/echo >>>>> ./hello http://64.232.245.115/axis2/services/hello >>>>> >>>>> But the responses for the corresponding https endpoints do not. >>>>> ./echo https://64.232.245.115:443/axis2/services/echo >>>>> yields "echo client invoke FAILED!" >>>>> ./hello https://64.232.245.115:443/axis2/services/hello >>>>> yields "hello client invoke FAILED!" >>>>> >>>>> The echo.log contains the following lines. >>>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(271) Transport >>>>> protocol >>>>> is >>>>> unsupported by axis2 >>>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(272) Invalid Transport >>>>> Protocol, HTTPS transport not enabled. >>>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(544) client data >>>>> stream >>>>> null or socket error for host 64.232.245.115 and 443 port >>>>> [Sat Sep 26 20:01:13 2009] [error] http_client.c(548) A read >>>>> attempt(HTTP) >>>>> for the reply without sending the request >>>>> [Sat Sep 26 20:01:13 2009] [error] http_sender.c(1381) status_code < 0 >>>>> [Sat Sep 26 20:01:13 2009] [error] engine.c(179) Transport sender >>>>> invoke >>>>> failed >>>>> [Sat Sep 26 20:01:13 2009] [error] echo.c(145) Stub invoke FAILED: >>>>> Error >>>>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>>>> request >>>>> >>>>> And the hello_client.log contains the following lines. >>>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(271) Transport >>>>> protocol >>>>> is >>>>> unsupported by axis2 >>>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(272) Invalid Transport >>>>> Protocol, HTTPS transport not enabled. >>>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(544) client data >>>>> stream >>>>> null or socket error for host 64.232.245.115 and 443 port >>>>> [Sat Sep 26 20:17:19 2009] [error] http_client.c(548) A read >>>>> attempt(HTTP) >>>>> for the reply without sending the request >>>>> [Sat Sep 26 20:17:19 2009] [error] http_sender.c(1381) status_code < 0 >>>>> [Sat Sep 26 20:17:19 2009] [error] engine.c(179) Transport sender >>>>> invoke >>>>> failed >>>>> [Sat Sep 26 20:17:19 2009] [error] hello.c(94) Stub invoke FAILED: >>>>> Error >>>>> code: 75 :: A read attempt(HTTP) for the reply without sending the >>>>> request >>>>> >>>>> Relevant lines from the axis2.xml file are: >>>>> >>>>> 443 >>>>> false >>>>> >>>>> ... >>>>> >>>>> HTTP/1.1 >>>>> >>>>> >>>>> >>>> name="SERVER_CERT">/usr/local/apache2/conf/ssl.crt/64.232.245.115.crt >>>>> >>>>> >>>>> Both the server module and SSL client were configured with openssl >>>>> enabled. >>>>> Details are available if needed. >>>>> >>>> >>>> >>>> >>>> -- >>>> S.Uthaiyashankar >>>> Software Architect >>>> WSO2 Inc. >>>> http://wso2.com/ - "The Open Source SOA Company" >>> >>> >>> >>> -- >>> S.Uthaiyashankar >>> Software Architect >>> WSO2 Inc. >>> http://wso2.com/ - "The Open Source SOA Company" >> >> >> >> -- >> S.Uthaiyashankar >> Software Architect >> WSO2 Inc. >> http://wso2.com/ - "The Open Source SOA Company" > > > > -- > S.Uthaiyashankar > Software Architect > WSO2 Inc. > http://wso2.com/ - "The Open Source SOA Company" -- S.Uthaiyashankar Software Architect WSO2 Inc. http://wso2.com/ - "The Open Source SOA Company" |
config_out (45K) | Free embeddable forum powered by Nabble | Forum Help |
