Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to do SSL mutual authentication in wso2esb with Client and Server

I am using wso2esb-4.8.1 with java web client. I wish to do SSL mutual authentication in wso2esb.My client web as well as android app so i followed http://pathberiya.blogspot.in/2012/08/enable-mutual-ssl-for-proxy-services-in.html above blog so i created .jks file and replaced with wso2carbon.jks its working. But how to do mutual authentication with back end server .It has its own certificate .Can i export that certificate into my wso2esb security folder.In that way is it work or not.Else i need to use same certificate with back end also help me for this.

client------------>proxy-------------->Backend

getting this error in esb starting level only

[ESB] [2014-05-29 18:56:19,653] ERROR {org.wso2.carbon.core.deployment.DeploymentInterceptor} -  Error while updating wso2carbon-sts in STSDeploymentInterceptor {org.wso2.carbon.core.deployment.DeploymentInterceptor}
java.lang.NullPointerException
    at org.wso2.carbon.core.util.KeyStoreUtil.getKeyStoreFileName(KeyStoreUtil.java:57)

after that one more error is

ERROR {org.wso2.carbon.tenant.mgt.internal.TenantMgtServiceComponent} -  ******* Tenant Config bundle failed activating **** {org.wso2.carbon.tenant.mgt.internal.TenantMgtServiceComponent}
java.lang.NullPointerException
    at java.util.Hashtable.put(Hashtable.java:514

This is about the https transport

FATAL {org.wso2.carbon.core.internal.StartupFinalizerServiceComponent} -  Cannot start transports {org.wso2.carbon.core.internal.StartupFinalizerServiceComponent}
java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

Thanks in Advance.

like image 560
user3595078 Avatar asked Dec 04 '25 14:12

user3595078


1 Answers

Mutual authentication is not currently supported for proxy -> backend communication. See JIRA issue here.

like image 82
SKYWALKR Avatar answered Dec 07 '25 15:12

SKYWALKR



Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!