Question

我正在使用java中的web服务。此服务使用UserNameToken，Timestamp和Signature来实现消息级安全性。我已经获得了SoapUI项目文件（xml）来尝试从服务中获取数据。在SoapUI中一切正常。

现在，当我尝试使用相同的soapUI文件生成工件时，我收到一条消息"Receiver Policy falsified"。为什么我可以连接到soapUI中的服务，但我不能在java中？

所以我发现我没有使用传输层安全性发送密钥库。如何在SOAP请求中发送它。我在SSL设置中的SOAP UI中做了类似的设置，它在那里工作。

这是我在java中的SOAP请求代码

SOAPConnectionFactory soapConnectionFactory = SOAPConnectionFactory.newInstance();
SOAPConnection soapConnection = soapConnectionFactory.createConnection();

    String url = "https://abc.org/test/ApplicantInformationService"; // Test System Web Service URL

SSLSocketFactory sslSocketFactory = getSSLSocketFactory();

conn = urlOnly.openConnection();
if (conn instanceof HttpsURLConnection) {
     ((HttpsURLConnection) conn).setSSLSocketFactory(sslSocketFactory);
     ((HttpsURLConnection) conn).setRequestMethod("POST");
 } 

conn.setRequestProperty("Content-Type", "application/soap+xml;charset=UTF-8");    
conn.setDoOutput(true);
SOAPMessage message = createSOAPRequest(user);
ByteArrayOutputStream os1 = new ByteArrayOutputStream();
message.writeTo(os1);
String requestXml = new String(os1.toByteArray()); 

OutputStreamWriter out = new OutputStreamWriter(conn.getOutputStream());
out.write(requestXml);
out.flush();
if(out != null){
    out.close();
}               
String line = "";                
BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream()));
String responseNewWay = "";
while ((line = in.readLine()) != null) {
    responseNewWay = responseNewWay + line;
}
//SOAPMessage soapResponse = soapConnection.call(createSOAPRequest(user), url);
//soapConnection.close();
//ByteArrayOutputStream os = new ByteArrayOutputStream();
//soapResponse.writeTo(os);
//String responseXml = new String(os.toByteArray());

SSLFactory Code就像这样

  private static SSLSocketFactory getSSLSocketFactory() 
    throws KeyStoreException, NoSuchAlgorithmException, CertificateException,  UnrecoverableKeyException, IOException, KeyManagementException{
    SSLSocketFactory sslsf = null;                  
    String keyStoreFileName = Preference.portalDir() + "mydocs/keystore.jks";           

        String keyStorePath = ClassLoader.getSystemResource(keyStoreFileName).getPath();        
    String keyStoreType = "JKS";
        String keyStorePassword = "mypassword";
        String trustStoreFileName = Preference.portalDir() + "mydocs/keystore.jks";        

        String trustStorePath = ClassLoader.getSystemResource(trustStoreFileName).getPath();
        String trustStorePassword = "mypassword";
        String alias = "clientcertificate";

        Properties systemProps = System.getProperties();
        systemProps.put("javax.net.ssl.keyStore", keyStorePath);
        systemProps.put("javax.net.ssl.keyStorePassword", keyStorePassword);
        systemProps.put("javax.net.ssl.keyStoreType", keyStoreType);

        systemProps.put("javax.net.ssl.trustStore", trustStorePath);
        systemProps.put("javax.net.ssl.trustStoreType", "JKS");
        systemProps.put("javax.net.ssl.trustStorePassword", trustStorePassword);
        System.setProperties(systemProps); 

        KeyManager[] keyManagers = createKeyManagers(keyStoreFileName,keyStorePassword, alias);
        TrustManager[] trustManagers = createTrustManagers(trustStoreFileName, trustStorePassword);
        sslsf = initItAll(keyManagers, trustManagers);

        return sslsf;
    }

我得到的错误SOAP响应是这样的

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
    <soapenv:Body>
        <soapenv:Fault>
            <soapenv:Code>
                <soapenv:Value>soapenv:Receiver</soapenv:Value>
            </soapenv:Code>
            <soapenv:Reason>
                <soapenv:Text xml:lang="en-US">Policy Falsified</soapenv:Text>
            </soapenv:Reason>
            <soapenv:Role>https://abc.org/test/ApplicantInformationService</soapenv:Role>
            <soapenv:Detail>
                <l7:policyResult
                    status="Service Not Found.  The request may have been sent to an invalid URL, or intended for an unsupported operation." xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>
            </soapenv:Detail>
        </soapenv:Fault>
    </soapenv:Body>

现在我收到此错误

Server returned HTTP response code: 500 for URL: https://abc.org/test/ApplicantInformationService

Answer 1

也许你必须在url字符串的末尾添加“？wsdl”：

String url = "https://abc.org/test/ApplicantInformationService?wsdl";

Answer 2

请你发布你的createSOAPRequest方法代码吗？我认为你的请求没有任何证书问题，因为你从服务器收到一个有效的SOAP响应，看起来你的安全头有问题，请检查你的请求SOAP消息对于Timestamp元素，可能是您为创建或过期标记发送了错误的值，服务器拒绝您的请求。

Answer 3

您似乎需要设置SSL上下文，以便能够在Java代码中通过HTTPS发送SOAP。为此，您可能需要遵循以下两个示例：

http://blog.hexican.com/2010/12/sending-soap-messages-through-https-using-saaj/
http://ruelajingsantiago.wordpress.com/2013/08/16/saaj-web-service-client-over-ssl/

另外，如果您考虑使用框架来执行此操作，我建议您使用CXF + Apache Camel：Apache Camel: CXF

在java和SOAPUI中使用Web服务

3 个答案: