Web Images Videos Maps News Shopping Google Mail more »
Recently Visited Groups | Help | Sign in
Google Groups Home
Consuming SSL secured web services
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  11 messages - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Follow-up To:
Add Cc | Add Follow-up to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers that you hear
 
Silvano Girardi Jr  
View profile   Translate to Translated (View Original)
 More options 19 Nov 2008, 14:12
From: "Silvano Girardi Jr" <silvan...@gmail.com>
Date: Wed, 19 Nov 2008 12:12:15 -0200
Local: Wed 19 Nov 2008 14:12
Subject: Consuming SSL secured web services
Lady and Gentlemen :)

I am trying to consume a SSL secured web service and I need to use a
certificate to even get to the WSDL.

I was doing changes in the SCA_Bindings_soap_Proxy to accept the
local_cert and passphrase, but after the first attempt I realized that
it may not be enough to do the job, as I believe the SDO_DAS_XML is
responsible for parsing the contents of the WSDL and thus it needs to
use the certificate as well.

Please let me know if I am wrong in my assumption, otherwise, does
anyone know a way to get around this problem? (So far I am trying to
download all the WSDL by hand and modifying the "import"s in the XSD's
to point to my server. No luck so far.)

Appreciate you help. This is a high priority for me.

Thanks,
Silvano


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
silvanojr  
View profile   Translate to Translated (View Original)
 More options 19 Nov 2008, 17:43
From: silvanojr <silvan...@gmail.com>
Date: Wed, 19 Nov 2008 09:43:31 -0800 (PST)
Local: Wed 19 Nov 2008 17:43
Subject: Re: Consuming SSL secured web services
Adding the error message.

[19-Nov-2008 12:42:27] PHP Fatal error:  Uncaught
SCA_RuntimeException: SDO_Exception in setWSDLTypes :
SDO_DAS_XML::create - Unable to parse the supplied xsd file
1 parse error(s) occurred when parsing the file 'https://URL/WS.wsdl':
1. xmlSAXUserParseFile returned an error -1

  thrown in /usr/share/pear/SCA/Bindings/soap/Proxy.php on line 104

Silvano

On 19 nov, 12:12, "Silvano Girardi Jr" <silvan...@gmail.com> wrote:


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Matthew Peters  
View profile   Translate to Translated (View Original)
 More options 20 Nov 2008, 18:36
From: Matthew Peters <matthew.f.pet...@googlemail.com>
Date: Thu, 20 Nov 2008 10:36:27 -0800 (PST)
Local: Thurs 20 Nov 2008 18:36
Subject: Re: Consuming SSL secured web services
The way I _think_ this works (though it is 2 years since I last looked
at this bit of the code) is as follows:
1. the Soap_Proxy calls setWSDLTypes
2. setWSDLTypes calls the SDO_DAS_XML::create (as shown in the message
below)
3. the SDO_DAS_XML code calls the Tuscany SDO code passing the URL
4. The Tuscany SDO code calls fopen() or something similar
5. This is picked up by the PHP file wrapper (see e.g. http://uk3.php.net/fopen)
6. PHP looks at the scheme (hhtps) and handles the open

So, I _think_ this comes down to the same behaviour that you would get
from fopen directly from PHP.

So, does
fopen('https://URL/WS.wsdl');
work?

Matthew

On 19 Nov, 17:43, silvanojr <silvan...@gmail.com> wrote:


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Silvano Girardi Jr  
View profile   Translate to Translated (View Original)
 More options 20 Nov 2008, 20:44
From: "Silvano Girardi Jr" <silvan...@gmail.com>
Date: Thu, 20 Nov 2008 18:44:01 -0200
Local: Thurs 20 Nov 2008 20:44
Subject: Re: [phpsoa] Re: Consuming SSL secured web services
On Thu, Nov 20, 2008 at 4:36 PM, Matthew Peters

Nope.

"failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden"

Because it requires the certificate as well.

Silvano


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Matthew Peters  
View profile   Translate to Translated (View Original)
 More options 23 Nov 2008, 20:49
From: Matthew Peters <matthew.f.pet...@googlemail.com>
Date: Sun, 23 Nov 2008 12:49:11 -0800 (PST)
Local: Sun 23 Nov 2008 20:49
Subject: Re: Consuming SSL secured web services
OK so that's useful information and makes sense. How would you go
about connecting to an https URL from PHP? I have never tried it. Is
there a way to give the userid and password to the file wrapper?

Matthew

On 20 Nov, 20:44, "Silvano Girardi Jr" <silvan...@gmail.com> wrote:


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Caroline Maynard  
View profile   Translate to Translated (View Original)
 More options 24 Nov 2008, 15:32
From: Caroline Maynard <c...@php.net>
Date: Mon, 24 Nov 2008 15:32:14 +0000
Local: Mon 24 Nov 2008 15:32
Subject: Re: Consuming SSL secured web services

Matthew Peters wrote:
> OK so that's useful information and makes sense. How would you go
> about connecting to an https URL from PHP? I have never tried it. Is
> there a way to give the userid and password to the file wrapper?

I've forgotten a lot of what I knew about this too, but Matthew's
approach of getting the connection working first without SCA is a good
one. The first obvious question is do you have OpenSSL compiled in?

    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Silvano Girardi Jr  
View profile   Translate to Translated (View Original)
 More options 24 Nov 2008, 15:40
From: "Silvano Girardi Jr" <silvan...@gmail.com>
Date: Mon, 24 Nov 2008 13:40:39 -0200
Local: Mon 24 Nov 2008 15:40
Subject: Re: [phpsoa] Re: Consuming SSL secured web services
On Sun, Nov 23, 2008 at 6:49 PM, Matthew Peters

<matthew.f.pet...@googlemail.com> wrote:

> OK so that's useful information and makes sense. How would you go
> about connecting to an https URL from PHP? I have never tried it. Is
> there a way to give the userid and password to the file wrapper?

> Matthew

For this specific case I need to get it via cURL, where I can specify the cert:

                curl_setopt($res_curl, CURLOPT_SSL_VERIFYPEER, 1);
                curl_setopt($res_curl, CURLOPT_SSLCERT, "/path/to/cert.crt");

or, like I resolved, using the SoapClient, but it was a pain to
convert all XSD types into classes. I'd love to be able to use SCA_SDO
with cases like these, so count on me to try to get this thing working
with SCA.

I wonder if there is any way to specify the certificate to PHP
somewhere else, so it would work with fopen() as well.

Silvano


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Silvano Girardi Jr  
View profile   Translate to Translated (View Original)
 More options 24 Nov 2008, 15:41
From: "Silvano Girardi Jr" <silvan...@gmail.com>
Date: Mon, 24 Nov 2008 13:41:07 -0200
Local: Mon 24 Nov 2008 15:41
Subject: Re: [phpsoa] Re: Consuming SSL secured web services

On Mon, Nov 24, 2008 at 1:32 PM, Caroline Maynard <c...@php.net> wrote:

> Matthew Peters wrote:
>> OK so that's useful information and makes sense. How would you go
>> about connecting to an https URL from PHP? I have never tried it. Is
>> there a way to give the userid and password to the file wrapper?

> I've forgotten a lot of what I knew about this too, but Matthew's
> approach of getting the connection working first without SCA is a good
> one. The first obvious question is do you have OpenSSL compiled in?

Yes, I do :)

Silvano


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Matthew Peters  
View profile   Translate to Translated (View Original)
 More options 25 Nov 2008, 09:58
From: Matthew Peters <matthew.f.pet...@googlemail.com>
Date: Tue, 25 Nov 2008 01:58:02 -0800 (PST)
Local: Tues 25 Nov 2008 09:58
Subject: Re: Consuming SSL secured web services
I wonder too. I suggest one of us put a question on one of the PHP
mailing lists, or maybe on the page to do with fopen(). Are you happy
to do that, Silvano?

Matthew

On Nov 24, 3:40 pm, "Silvano Girardi Jr" <silvan...@gmail.com> wrote:


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Silvano Girardi Jr  
View profile   Translate to Translated (View Original)
 More options 25 Nov 2008, 12:47
From: "Silvano Girardi Jr" <silvan...@gmail.com>
Date: Tue, 25 Nov 2008 10:47:01 -0200
Local: Tues 25 Nov 2008 12:47
Subject: Re: [phpsoa] Re: Consuming SSL secured web services
On Tue, Nov 25, 2008 at 7:58 AM, Matthew Peters

<matthew.f.pet...@googlemail.com> wrote:

> I wonder too. I suggest one of us put a question on one of the PHP
> mailing lists, or maybe on the page to do with fopen(). Are you happy
> to do that, Silvano?

Yes. I will talk to the core developers directly.

I will let you know.

Silvano


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Rob  
View profile   Translate to Translated (View Original)
 More options 12 Dec 2008, 13:38
From: Rob <rricha...@cdatazone.org>
Date: Fri, 12 Dec 2008 05:38:50 -0800 (PST)
Local: Fri 12 Dec 2008 13:38
Subject: Re: Consuming SSL secured web services

On 25 Nov, 04:47, "Silvano Girardi Jr" <silvan...@gmail.com> wrote:

Hey all, while not all that active around here, I still lurk and try
to follow whats going on around here :)

Have you tried creating a stream context and setting the SSL options
there?
not only can this be passed to fopen, but it should also work if you
set it as the default stream context as well.

Rob


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »

Google Groups - Google Home - Terms of Service - Privacy Policy
©2009 Google