10 Replies Latest reply on Jan 31, 2006 11:53 AM by 666705

    WebServices over SSL - 403 Forbidden error

    666705
      Hello all,
      I am able to successfully communicate with a SSL enabled .NET webservice using apache-axis in my java code. however, when i

      try the same with weblogic based libs [%bea_home%\server\lib\webserviceclient+ssl.jar] - assume the other jars are ok, i get

      the following exception stack trace:

      Disabling strict checking on adapter weblogic.webservice.client.WLSSLAdapter@55a338
      Set TrustManager to weblogic.webservice.client.BaseWLSSLAdapter$NullTrustManager@fdb00d
      Set HostnameVerifier to weblogic.webservice.client.WLSSLAdapter$NullVerifier@131303f
      Disabling strict checking on adapter weblogic.webservice.client.WLSSLAdapter@6b9c84
      Set TrustManager to weblogic.webservice.client.BaseWLSSLAdapter$NullTrustManager@e1eea8
      Set HostnameVerifier to weblogic.webservice.client.WLSSLAdapter$NullVerifier@131303f
      Got new socketfactory javax.net.ssl.impl.SSLSocketFactoryImpl@18f51f
      Connecting to:www.abc.com port:443

      socket:Socket[addr=www.abc.com/12.345.67.89,port=443,localport=4802]com.certicom.tls.interfaceimpl.TLSConnectionImpl@e35bb7
      Warning: cert chain incomplete
      Warning: cert chain untrusted
      Warning: subject (www.abc.com, OU=Terms of use at www.verisign.com/rpa (c)00, OU=ABC 1, O=ABC inc, L=abc, ST=abc, C=abc) does

      not match server name (null)
      <Jul 27, 2004 10:52:49 AM GMT+05:30> <Info> <WebService> <BEA-220025> <Handler weblogic.webservice.core.handler.ClientHandler

      threw an exception from its handleResponse method. The exception was:
      javax.xml.rpc.JAXRPCException: weblogic.webservice.util.AccessException: The server at

      https://www.abc.com/abcdef/ABCWebService.asmx?WSDL returned a 403 error code (Forbidden). Please ensure that your URL is

      correct and that the correct protocol is in use..>
      A RemoteException has been thrown
      java.rmi.RemoteException: SOAP Fault:javax.xml.rpc.soap.SOAPFaultException: The server at

      https://www.abc.com/abcdef/ABCWebService.asmx?WSDL returned a 403 error code (Forbidden). Please ensure that your URL is

      correct and that the correct protocol is in use.
      Detail:
      <detail>
      <bea_fault:stacktrace xmlns:bea_fault="http://www.bea.com/servers/wls70/webservice/fault/1.0.0">
      </bea_fault:stacktrace>weblogic.webservice.util.AccessException: The server at

      https://www.abc.com/abcdef/ABCWebService.asmx?WSDL returned a 403 error code (Forbidden). Please ensure that your URL is

      correct and that the correct protocol is in use.
           at weblogic.webservice.binding.soap.HttpClientBinding.handleErrorResponse(HttpClientBinding.java:371)
           at weblogic.webservice.binding.soap.HttpClientBinding.receive(HttpClientBinding.java:233)
           at weblogic.webservice.core.handler.ClientHandler.handleResponse(ClientHandler.java:63)
           at weblogic.webservice.core.HandlerChainImpl.handleResponse(HandlerChainImpl.java:230)
           at weblogic.webservice.core.ClientDispatcher.receive(ClientDispatcher.java:229)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:144)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:444)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)
           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:270)
           at com.webservice.abc.client.proxy.ABCWebserviceSoap_Stub.getABC(ABCWebserviceSoap_Stub.java:113)
           at com.webservice.abc.client.ABC_WS_Client.main(ABC_WS_Client.java:158)

      </detail>; nested exception is:
           javax.xml.rpc.soap.SOAPFaultException: The server at https://www.abc.com/abcdef/ABCWebService.asmx?WSDL returned a

      403 error code (Forbidden). Please ensure that your URL is correct and that the correct protocol is in use.
           at com.webservice.abc.client.proxy.ABCWebserviceSoap_Stub.getABC(ABCWebserviceSoap_Stub.java:118)
           at com.webservice.abc.client.ABC_WS_Client.main(ABC_WS_Client.java:158)
      Caused by: javax.xml.rpc.soap.SOAPFaultException: The server at https://www.abc.com/abcdef/ABCWebService.asmx?WSDL returned a

      403 error code (Forbidden). Please ensure that your URL is correct and that the correct protocol is in use.
           at weblogic.webservice.core.ClientDispatcher.receive(ClientDispatcher.java:285)
           at weblogic.webservice.core.ClientDispatcher.dispatch(ClientDispatcher.java:144)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:444)
           at weblogic.webservice.core.DefaultOperation.invoke(DefaultOperation.java:430)END

           at weblogic.webservice.core.rpc.StubImpl._invoke(StubImpl.java:270)
           at com.webservice.abc.client.proxy.ABCWebserviceSoap_Stub.getABC(ABCWebserviceSoap_Stub.java:113)
           ... 1 more
        • 1. Re: WebServices over SSL - 403 Forbidden error
          666705
          are you able to connect using just http? The issue seems to be the .net service rejecting your request.

          Jong
          • 2. Re: WebServices over SSL - 403 Forbidden error
            666705
            hey jong,
            unfortunately, this being a prod url no http access is allowed....
            also, bea does not seem it important to return the type of 403 error.
            e.g. 403.5 is access forbidden if u do not use 128-bit encrpytion in ure request.....
            etc...
            etc....

            inviting further responses/suggestions....
            • 3. Re: WebServices over SSL - 403 Forbidden error
              666705
              my earlier response was wrt java connect....

              internet explorer browser gives me a 404 ???
              as does cygwin - lynx....
              • 4. Re: WebServices over SSL - 403 Forbidden error
                666705
                just a thought...
                Jong, are u trying to say that if a WSDL location is not reachable via http, then there is no point tring to interact with it over ssl, assuming that ssl access is available and http is forbidden.... ???
                to explain, I created the soap client proxy using the clientgen ant task, but as it does not support SSL, I had to find other means..
                fortunately there is another WSDL location which is http based and is a demo server.
                we however, need to interact with the prod server only...
                i tried interacting locally with a .NET based service in our facility, and there seemed to be no problem wrt bea-ws and .net-ws....
                So, unless the server in question is doing a redirect or has blocked access explicitly to the server....
                I really do not know abt it at this point in time.

                BTW is there a decent way in which I can get hold on any of the underlying ws wrapper classes or https/s bindings ?
                TIA.
                • 5. Re: WebServices over SSL - 403 Forbidden error
                  666705
                  the issue looks similar to one of bug issue CR185228.
                  • 6. Re: WebServices over SSL - 403 Forbidden error
                    666705
                    ignore the previous post -- wrong one.
                    If we can access via http then it's sure to be a problem using https. But now it's hard to tell if the service really available or not.

                    thanks
                    Jong
                    • 7. Re: WebServices over SSL - 403 Forbidden error
                      666705
                      I am very interest to see if the issue is resolved. I am doing very similar things and getting similar problem. What I want to do is building a webservice client running in the WLS8.1 environment to communicate with a .Net server on top of the SSL channel. I am getting the same forbidden response but to me the ssl handshake seems to be complete from the SSL log. I was able to build a java client (using Sun jws ) without the WLS8.1 to talk to the .Net server.
                      I read somewhere that the key strength of the Cipher Suite may affect the connection to .Net server because MS Server requires 128 bit encryption. A couple of questions :
                      1. Does the downloadable devlopment lincense of WLS 8.1 use 128-bit or 56-bit key ? Is there anyway to change it ?
                      2. What is the detail of the bug report CR185228 ?

                      Regards.






                      SSL Logs look like :
                      --------------
                      ...
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLTrustValidator returns: 0>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <Trust status (0): NONE>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: CertificateRequest>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: ServerHelloDone>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 7>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 134>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <write CHANGE_CIPHER_SPEC offset = 0 length = 1>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <write HANDSHAKE offset = 0 length = 16>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <isMuxerActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 readRecord()>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 SSL3/TLS MAC>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 received CHANGE_CIPHER_SPEC>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <isMuxerActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 readRecord()>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 SSL3/TLS MAC>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 received HANDSHAKE>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: Finished>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <isMuxerActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <SSLFilter.isActivated: false>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 readRecord()>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 SSL3/TLS MAC>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 received APPLICATION_DATA>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 APPDATA databufferLen 0>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 APPDATA contentLength 4354>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 read databufferLen 4354>
                      <Aug 26, 2004 2:54:18 PM EDT> <Debug> <TLS> <000000> <1842007 read B returns 2048>
                      javax.xml.soap.SOAPException: Failed to send message: weblogic.webservice.util.AccessException: The server at https://demo.test.com/WebServices.wsdl returned a 403 error code (Forbidd
                      en). Please ensure that your URL is correct and that the correct protocol is in use.
                      at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionImpl.java:62)
                      • 8. Re: WebServices over SSL - 403 Forbidden error
                        666705
                        Hello all,
                        Just to add, this is NOT related to the 403 issue which relates to the way IIS sets up /allows running of scripts and executables... anyway I think this maybe useful to the readers who need to achieve the same [proxy the webservice call] but have taken different routes... !!!
                        I finally got back to this problem again, as we were happy using Apache AXIS 1.1 until now. I dont forsee this thing being implemented in production/QA immediately so please test and try this at your own risk.


                        I think that the problem is with the WSDLReader which looks up the WSDL file that clientgen creates. If it points to a HTTPS target endpoint this error occurs. So what I did was set up a dummy soap address location in the WSDL file [This is a bad hack]. Make sure that this WSDL is available locally to the WSDL reader. [When running the clientgen task set the keepGenerated attribute as 'true'] and the it is url which is HTTP only .
                        Next, the clientgen-generated Soap stub [MyWebServiceSoap_Stub.java]should be manually edited by hand to add the following in the webservice method call [this webservice method typically returns a javax.xml.soap.SOAPElement and throws a java.rmi.RemoteException] {Not required really}
                        Just after the hashmap[_args] is populated with the parameters received from the webservice client calling the webservice method and just before the call to weblogic.webservice.core.rpc.StubImpl_invoke() is made:

                        _setTargetEndpoint(new URL("https://www.thewebserviceserver.com/WebService.wsdl"));
                        [All this depends on how you have generated the soap client proxy using clientgen ant task or the command line usage]
                        Remember though to add the javax.net.ssl.trustStore property and you can watch the ssl messages with the system property javax.net.debug; set it to "all" initially.
                        This should work. [Well this doesnt!]
                        At least is does for me though it is a bit crude.
                        Problem is with the certicom libraries being used I think by the WSDLReader....
                        Once we dummy / override that with the call to the _setTargetEndpoint... things are different.
                        You can experiment by not supplying the trustStore location first and then see the exception traces....
                        It is rather interesting..
                        BTW I arrived at this solution when I saw a
                        {{{
                        javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Could not find trusted certificate

                        }}}
                        message in my stacktrace which was good and helped me in trying this out! I knew I was halfway there already then !
                        javax.net.ssl excpetions are good and can be handled. It was the certicom libraries which presented the problem.
                        [i]


                        Use the file: protocol to access the WSDL....
                        clientgen can generate the stubs based on this wsdl irrespective of whether the soap:address location is HTTP or HTTPS based!


                        Message was edited by ws_dev2001 at Jan 5, 2005 9:48 AM
                        • 9. Re: WebServices over SSL - 403 Forbidden error
                          666705
                          Hi All,
                          I am new to webservice programming. I am trying to consume webservice over https. I am using weblogic 8.1 sp2. I am getting http 403 forbidden error. from the log it seems that ssl handshaking is completing.


                          Algorithm: [MD2withRSA]

                          Signature:

                          0000: BB 4C 12 2B CF 2C 26 00 4F 14 13 DD A6 FB FC 0A .L.+.,&.O.......

                          0010: 11 84 8C F3 28 1C 67 92 2F 7C B6 C5 FA DF F0 E8 ....(.g./.......

                          0020: 95 BC 1D 8F 6C 2C A8 51 CC 73 D8 A4 C0 53 F0 4E ....l,.Q.s...S.N

                          0030: D6 26 C0 76 01 57 81 92 5E 21 F1 D1 B1 FF E7 D0 .&.v.W..^!......

                          0040: 21 58 CD 69 17 E3 44 1C 9C 19 44 39 89 5C DC 9C !X.i..D...D9.\..

                          0050: 00 0F 56 8D 02 99 ED A2 90 45 4C E4 BB 10 A4 3D ..V......EL....=

                          0060: F0 32 03 0E F1 CE F8 E8 C9 51 8C E6 62 9F E6 9F .2.......Q..b...

                          0070: C0 7D B7 72 9C C9 36 3A 6B 9F 4E A8 FF 64 0D 64 ...r..6:k.N..d.d



                          ]>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLTrustValidator r

                          eturns: 0>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <Trust status (0): N

                          ONE>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: S

                          erverHelloDone>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write HANDSHAKE off

                          set = 0 length = 134>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write CHANGE_CIPHER

                          _SPEC offset = 0 length = 1>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write HANDSHAKE off

                          set = 0 length = 16>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                          alse>

                          <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                          )>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                          C>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received CH

                          ANGE_CIPHER_SPEC>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                          alse>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                          )>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                          C>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received HA

                          NDSHAKE>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: F

                          inished>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <write APPLICATION_D

                          ATA offset = 0 length = 304>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <write APPLICATION_D

                          ATA offset = 0 length = 558>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read( offse

                          t: 0 length: 2048 )>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                          alse>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                          ed: false>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                          )>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                          C>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received AP

                          PLICATION_DATA>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 APPDATA dat

                          abufferLen 0>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 APPDATA con

                          tentLength 1907>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read databu

                          fferLen 1907>

                          <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read A retu

                          rns 1907>

                          javax.xml.soap.SOAPException: Failed to send message: weblogic.webservice.util.A

                          ccessException: The server at https://www.3pv.net/3PVWebServices/3PVWebServices.

                          asmx?wsdl returned a 403 error code (Forbidden). Please ensure that your URL is

                          correct and that the correct protocol is in use.

                          at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                          mpl.java:61)

                          at com.ceon.pencor.threepv.ThreePVUtils.sendOrderRequest(ThreePVUtils.ja

                          va:350)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl.sendThreePVRequest(ThreePV

                          AdapterImpl.java:119)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl.sendThreePVR

                          equest(ThreePVAdapterImpl_ydsnbq_EOImpl.java:46)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl_WLSkel.invok

                          e(Unknown Source)

                          at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:477)

                          at weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerR

                          ef.java:108)

                          at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:420)

                          at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate

                          dSubject.java:353)

                          at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:

                          144)

                          at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.jav

                          a:415)

                          at weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest

                          .java:30)

                          at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)

                          at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

                          Caused by: weblogic.webservice.util.AccessException: The server at https://www.3

                          pv.net/3PVWebServices/3PVWebServices.asmx?wsdl returned a 403 error code (Forbid

                          den). Please ensure that your URL is correct and that the correct protocol is i

                          n use.

                          at weblogic.webservice.binding.http11.Http11ClientBinding.handleErrorRes

                          ponse(Http11ClientBinding.java:136)

                          at weblogic.webservice.binding.http11.Http11ClientBinding.receive(Http11

                          ClientBinding.java:220)

                          at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                          mpl.java:57)

                          ... 13 more

                          javax.xml.soap.SOAPException: Failed to send message: weblogic.webservice.util.A

                          ccessException: The server at https://www.3pv.net/3PVWebServices/3PVWebServices.

                          asmx?wsdl returned a 403 error code (Forbidden). Please ensure that your URL is

                          correct and that the correct protocol is in use.

                          at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                          mpl.java:61)

                          at com.ceon.pencor.threepv.ThreePVUtils.sendOrderRequest(ThreePVUtils.ja

                          va:350)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl.sendThreePVRequest(ThreePV

                          AdapterImpl.java:119)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl.sendThreePVR

                          equest(ThreePVAdapterImpl_ydsnbq_EOImpl.java:46)

                          at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl_WLSkel.invok

                          e(Unknown Source)

                          at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:477)

                          at weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerR

                          ef.java:108)

                          at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:420)

                          at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate

                          dSubject.java:353)

                          at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:

                          144)

                          at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.jav

                          a:415)

                          at weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest

                          .java:30)

                          at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)

                          at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

                          Caused by: weblogic.webservice.util.AccessException: The server at https://www.3

                          pv.net/3PVWebServices/3PVWebServices.asmx?wsdl returned a 403 error code (Forbid

                          den). Please ensure that your URL is correct and that the correct protocol is i

                          n use.

                          at weblogic.webservice.binding.http11.Http11ClientBinding.handleErrorRes

                          ponse(Http11ClientBinding.java:136)

                          at weblogic.webservice.binding.http11.Http11ClientBinding.receive(Http11

                          ClientBinding.java:220)

                          at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                          mpl.java:57)

                          ... 13 more

                          ERROR : Exception is occurred during connecting url:https://www.3pv.net/3PVWebS

                          ervices/3PVWebServices.asmx?wsdl



                          Please help...

                          Cordially
                          Sandip
                          • 10. Re: WebServices over SSL - 403 Forbidden error
                            666705
                            Hi All,
                            I am new to webservice programming. I am trying to consume webservice over https. I am using weblogic 8.1 sp2. I am getting http 403 forbidden error. from the log it seems that ssl handshaking is completing.


                            Algorithm: [MD2withRSA]

                            Signature:

                            0000: BB 4C 12 2B CF 2C 26 00 4F 14 13 DD A6 FB FC 0A .L.+.,&.O.......

                            0010: 11 84 8C F3 28 1C 67 92 2F 7C B6 C5 FA DF F0 E8 ....(.g./.......

                            0020: 95 BC 1D 8F 6C 2C A8 51 CC 73 D8 A4 C0 53 F0 4E ....l,.Q.s...S.N

                            0030: D6 26 C0 76 01 57 81 92 5E 21 F1 D1 B1 FF E7 D0 .&.v.W..^!......

                            0040: 21 58 CD 69 17 E3 44 1C 9C 19 44 39 89 5C DC 9C !X.i..D...D9.\..

                            0050: 00 0F 56 8D 02 99 ED A2 90 45 4C E4 BB 10 A4 3D ..V......EL....=

                            0060: F0 32 03 0E F1 CE F8 E8 C9 51 8C E6 62 9F E6 9F .2.......Q..b...

                            0070: C0 7D B7 72 9C C9 36 3A 6B 9F 4E A8 FF 64 0D 64 ...r..6:k.N..d.d



                            ]>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLTrustValidator r

                            eturns: 0>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <Trust status (0): N

                            ONE>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: S

                            erverHelloDone>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write HANDSHAKE off

                            set = 0 length = 134>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write CHANGE_CIPHER

                            _SPEC offset = 0 length = 1>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <write HANDSHAKE off

                            set = 0 length = 16>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                            alse>

                            <Jan 30, 2006 11:39:29 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                            )>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                            C>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received CH

                            ANGE_CIPHER_SPEC>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                            alse>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                            )>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                            C>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received HA

                            NDSHAKE>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <HANDSHAKEMESSAGE: F

                            inished>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <write APPLICATION_D

                            ATA offset = 0 length = 304>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <write APPLICATION_D

                            ATA offset = 0 length = 558>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read( offse

                            t: 0 length: 2048 )>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <isMuxerActivated: f

                            alse>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <SSLFilter.isActivat

                            ed: false>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 readRecord(

                            )>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 SSL3/TLS MA

                            C>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 received AP

                            PLICATION_DATA>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 APPDATA dat

                            abufferLen 0>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 APPDATA con

                            tentLength 1907>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read databu

                            fferLen 1907>

                            <Jan 30, 2006 11:39:30 AM GMT+05:30> <Debug> <TLS> <000000> <5564590 read A retu

                            rns 1907>

                            javax.xml.soap.SOAPException: Failed to send message: weblogic.webservice.util.A

                            ccessException: The server at https://www.3pv.net/3PVWebServices/3PVWebServices.

                            asmx?wsdl returned a 403 error code (Forbidden). Please ensure that your URL is

                            correct and that the correct protocol is in use.

                            at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                            mpl.java:61)

                            at com.ceon.pencor.threepv.ThreePVUtils.sendOrderRequest(ThreePVUtils.ja

                            va:350)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl.sendThreePVRequest(ThreePV

                            AdapterImpl.java:119)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl.sendThreePVR

                            equest(ThreePVAdapterImpl_ydsnbq_EOImpl.java:46)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl_WLSkel.invok

                            e(Unknown Source)

                            at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:477)

                            at weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerR

                            ef.java:108)

                            at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:420)

                            at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate

                            dSubject.java:353)

                            at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:

                            144)

                            at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.jav

                            a:415)

                            at weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest

                            .java:30)

                            at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)

                            at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

                            Caused by: weblogic.webservice.util.AccessException: The server at https://www.3

                            pv.net/3PVWebServices/3PVWebServices.asmx?wsdl returned a 403 error code (Forbid

                            den). Please ensure that your URL is correct and that the correct protocol is i

                            n use.

                            at weblogic.webservice.binding.http11.Http11ClientBinding.handleErrorRes

                            ponse(Http11ClientBinding.java:136)

                            at weblogic.webservice.binding.http11.Http11ClientBinding.receive(Http11

                            ClientBinding.java:220)

                            at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                            mpl.java:57)

                            ... 13 more

                            javax.xml.soap.SOAPException: Failed to send message: weblogic.webservice.util.A

                            ccessException: The server at https://www.3pv.net/3PVWebServices/3PVWebServices.

                            asmx?wsdl returned a 403 error code (Forbidden). Please ensure that your URL is

                            correct and that the correct protocol is in use.

                            at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                            mpl.java:61)

                            at com.ceon.pencor.threepv.ThreePVUtils.sendOrderRequest(ThreePVUtils.ja

                            va:350)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl.sendThreePVRequest(ThreePV

                            AdapterImpl.java:119)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl.sendThreePVR

                            equest(ThreePVAdapterImpl_ydsnbq_EOImpl.java:46)

                            at com.ceon.pencor.threepv.ThreePVAdapterImpl_ydsnbq_EOImpl_WLSkel.invok

                            e(Unknown Source)

                            at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:477)

                            at weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerR

                            ef.java:108)

                            at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:420)

                            at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate

                            dSubject.java:353)

                            at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:

                            144)

                            at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.jav

                            a:415)

                            at weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest

                            .java:30)

                            at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197)

                            at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)

                            Caused by: weblogic.webservice.util.AccessException: The server at https://www.3

                            pv.net/3PVWebServices/3PVWebServices.asmx?wsdl returned a 403 error code (Forbid

                            den). Please ensure that your URL is correct and that the correct protocol is i

                            n use.

                            at weblogic.webservice.binding.http11.Http11ClientBinding.handleErrorRes

                            ponse(Http11ClientBinding.java:136)

                            at weblogic.webservice.binding.http11.Http11ClientBinding.receive(Http11

                            ClientBinding.java:220)

                            at weblogic.webservice.core.soap.SOAPConnectionImpl.call(SOAPConnectionI

                            mpl.java:57)

                            ... 13 more

                            ERROR : Exception is occurred during connecting url:https://www.3pv.net/3PVWebS

                            ervices/3PVWebServices.asmx?wsdl



                            Please help...

                            Cordially
                            Sandip