Setting up a own CA for the enterprise

…######### 16 [ CA_default ] 17 18 dir = ./CA # Where everything is kept 19 certs = $dir/certs # Where the issued certs are kept 20 crl_dir = $dir/crl # Where the issued crl are kept 21 database = $dir/index.txt # database index file. 22 #unique_subject = no # Set to ‘no’ to allow creation of 23 # several ctificates with same subject. 24 new_certs_dir = $dir/newcerts # default place for new certs. 25 26 certificate = $dir/cacert.pem # The CA certif…

Continue reading


Webservice with Spring Web Services 2.0 (M3)

…andalone=”no”?> 2 <xs:schema xmlns:testService=”http://ws.opitz-consulting.com/test/sws2/TestService” xmlns:xs=”http://www.w3.org/2001/XMLSchema” elementFormDefault=”qualified” targetNamespace=”http://ws.opitz-consulting.com/test/sws2/TestService”> 3 <xs:element name=”checkValueRequest”> 4 <xs:complexType> 5 <xs:sequence> 6 <xs:element name=”testToken” type=”xs:token”/> 7 <xs:element name=”date” type=”xs:date”/> 8 </xs:sequence> 9 </xs:complexType…

Continue reading


OSB: Creating meaningful SOAP exceptions

…r=”$errorMessage” type=”xs:string” ::) 8 9 declare namespace con = “http://www.bea.com/wli/sb/context”; 10 declare namespace exception = “http://opitz-consulting.com/data/common/BusinessExceptionTypes/V1″; 11 declare namespace request = “http://opitz-consulting.com/data/common/RequestInformationTypes/V1″; 12 declare namespace soap = “http://schemas.xmlsoap.org/soap/envelope/”; 13 declare namespace xf = “http://opitz-consulting.com/data/common/tran…

Continue reading


OSB: Configuration with custom XQuery functions

…l version=”1.0″ encoding=”UTF-8″?> 2 <xpf:xpathFunctions xmlns:xpf=”http://www.bea.com/wli/sb/xpath/config”> 3 <xpf:category id=”OSB Configuration XQuery Functions”> 4 5 <xpf:function> 6 <xpf:name>getServerName</xpf:name> 7 <xpf:comment>Returns the hostname of the server.</xpf:comment> 8 <xpf:namespaceURI>http://opitz-consulting.com/osb/custom/functions/config</xpf:namespaceURI> 9 <xpf:className>com.opitzconsulting.osb.xquery.config.ConfigXQueryFu…

Continue reading


Back to the roots: Nachvollziehbarkeit und Konsistenz – Vom Fachkonzept zum Code

…s: http://www.opitz-consulting.com/fileadmin/redaktion/veroeffentlichungen/pdf/objekt_spektrum_2010_6_maehr_sicher.pdf Bernhard Mähr @ OPITZ-CONSULTING published at http://thecattlecrew.wordpress.com/ Click to share on Facebook (Opens in new window) Click to share on Twitter (Opens in new window) Click to share on WhatsApp (Opens in new window) Click to share on Telegram (Opens in new window) Click to print (Opens in new window) Click to email a l…

Continue reading


Tunneling SSH over HTTPS with Apache 2.4 and virtual hosts

…onnect didn’t connect to tunnel.bmaehr.com – instead the connection was to www.bmaehr.com. I decided to built a new version of proxytunnel for windows with the latest sources. They are available at github. There where at least two people providing a patch for proxytunnel to support SNI. Unfortunately no one added their path to the source. I was able to find one of the patches here and include it myself. I compiled proxytunnel according this blog u…

Continue reading


JAX-WS: How to input and output XML AnyType

…pper(localName = “testXMLCall”, targetNamespace = “http://opitz-consulting.com/interfaces/TestMessages/V1″, className = “com.oc.soa.sample.ws.v1.messages.TestXMLCall”) 4 @ResponseWrapper(localName = “testXMLCallResponse”, targetNamespace = “http://opitz-consulting.com/interfaces/TestMessages/V1″, className = “com.oc.soa.sample.ws.v1.messages.TestXMLCallResponse”) 5 public Object testXMLCall( 6 @WebParam(name = “name”, targetNamespace = “http://opi…

Continue reading


Using certificates for authentication at M2M communication

…by the trusted CA and not by a third party. Inside the enterprise it is a best practice to trust on the predefined list of trusted CAs and not on the list automatically provided by Java, SAP or an other manufacturer. Instead a custom list containing only the own trusted CA should be used. Bidirectional communication with client certificates If the communication can be initiated from both machines or we are using asynchronous webservices we need t…

Continue reading


Editing build.prop on Android L

…So I tried different other possibilities like Root Explorer (root not with free version) or others, which needs installation of busy box, without success. Finally I decided to do it manually. I started Terminal Emulator and entered this commands: su cp /system/build.prop /sdcard This copied the build.prop file to the director /sdcard where I was able to edit the file with a text editor and save the changes. To copy the file back it was necessary t…

Continue reading


Creating SSLContext for up-to-date HTTPS communiction with client certificate

…torePassword(), sslConfig.getKeyName(), sslConfig.getKeyPassword()); final TrustManager[] trustManagers = SSLUtil.getTrustManagers(sslConfig.getTrustStoreFile(), sslConfig.getTrustStorePassword()); sslContext.init(keyManagers, trustManagers, new SecureRandom()); } else { final SSLContextBuilder sslContextBuilder = new SSLContextBuilder(); sslContextBuilder.loadTrustMaterial(null, new TrustStrategy() { @Override public boolean isTrusted(final X509C…

Continue reading