Email Antispam - Sender-Vouches style

http://antispam.yahoo.com/domainkeys

Buffer Overflows Illustration

Buffer Overflows Illustration

• http://www.informit.com/guides/content.asp?g=security&seqNum=152&rl=1

Types of Overflows

• http://www.informit.com/guides/content.asp?g=security&seqNum=154

AXIS WSDL2JAVA JAVA2WSDL

http://www.spikesource.com/docs/cs_1.6.0-linux/doc/axis/axis_quickstartguide.html

Notes:

Case-sensitive typo on above doc: org.apache.axis.wsdl.Wsdl2java should be org.apache.axis.wsdl.WSDL2Java; therefore:

• java -classpath $CLASSPATH org.apache.axis.wsdl.WSDL2Java -t -s MedRecService.wsdl

JAVA API in javadoc format

http://www.jdocs.com/

AXIS axis.jar 1.2 and BEA weblogic.jar 8.1 not compatible

If you try to use AXIS 1.2 axis.jar with BEA weblogic.jar 8.1, this match will not work. You will get following exceptions:

org.apache.axis.ConfigurationException: java.lang.NullPointerExceptionjava.lang.NullPointerException at weblogic.xml.jaxp.ChainingEntityResolver.popEntityResolver(ChainingEntityResolver.java:61) at weblogic.xml.jaxp.RegistryDocumentBuilder.setEntityResolver(RegistryDocumentBuilder.java:168) at org.apache.axis.utils.XMLUtils.newDocument(XMLUtils.java:336) at org.apache.axis.utils.XMLUtils.newDocument(XMLUtils.java:357)

One of the easiest solution: To compile with AXIS 1.1 axis.jar instead.

http://forum.java.sun.com/thread.jspa?threadID=584957&messageID=3002175

jarhoo - Search for jar files or fully qualified java classnames

Given a class path/name, which jar does it belong?
To search for jar files or fully qualified java classnames?
Class not found?
http://www.jarhoo.com/jarhoo/index.jsp

Creating a Perl Web Service Client

Creating a Perl Web Service Client(http://www.informit.com/guides/content.asp?g=xml&seqNum=243)

Free Security Software: Antivirus & Antispyware

Free Security Software: Antivirus & Antispyware (http://www.informit.com/guides/content.asp?g=security&seqNum=151)

Deploy Stock Quote web service which comes with Axis as an sample

=============
Deploy Stock Quote which comes with Axis as an sample
=============

java -cp "$AXISCLASSPATH" org.apache.axis.client.AdminClient -lhttp://localhost:8080/axis/services/AdminService deploy.wsdd

where deploy.wsdd can be found at axis/samples/stock/deploy.wsdd

To test:
Add “$AXIS_LIB/wsdl4j.jar” to AXISCLASSPATH

export AXISCLASSPATH=$AXIS_LIB/axis.jar:$AXIS_LIB/commons-discovery.jar:$AXIS_LIB/commons-logging.jar:$AXIS_LIB/jaxrpc.jar:$AXIS_LIB/saaj.jar:$AXIS_LIB/log4j-1.2.8.jar:$AXIS_LIB/xml-apis.jar:$AXIS_LIB/xercesImpl.jar:$AXIS_LIB/wsdl4j.jar

java -cp $AXISCLASSPATH org.apache.axis.wsdl.WSDL2Java -o . -Nhttp://localhost:8080/axis/services/stock-wss-01 samples.stock.client http://localhost:8080/axis/services/stock-wss-01?wsdl

Jar up samples/stock/*.class to stockClient.jar
jar -cvf stockClient.jar samples

Linux Run…
[wss4j@fishcake stock]$ java -cp "stockClient.jar:$AXISCLASSPATH" samples.stock.GetQuote -lhttp://localhost:8080/axis/servlet/AxisServlet -uuser1 -wpass1 IBM
log4j:WARN No appenders could be found for logger (org.apache.axis.i18n.ProjectResourceBundle).
log4j:WARN Please initialize the log4j system properly.
IBM: 93.3

Windows Run…

C:\axis-bin-1_2beta\axis-1_2beta\samples\stock>set STOCKCLASSPATH
STOCKCLASSPATH=C:\axis-bin-1_2beta\axis-1_2beta\samples\stock\stockClient.jar

C:\axis-bin-1_2beta\axis-1_2beta\samples\stock>java -cp %STOCKCLASSPATH%;%AXISCL
ASSPATH% samples.stock.GetQuote -lhttp://localhost:8080/axis/servlet/AxisServlet
-uuser1 -wpass1 XXX
XXX: 55.25

www.openssl.org to create CA root certificate & corresponding client certificate

(1) Tools to create CA root certificate and a client certificate signed by that CA root, and package it as a pkcs12 file

• Download source: http://www.openssl.org/source/ - following info verified against version 0.9.7d
• Documentation of "CA.pl": http://www.openssl.org/docs/apps/CA.pl.html

Before creating CA certificates and signed client certificates:

• You may edit "openssl-0.9.7d/apps/CA.pl" perl script to configure parameters for CA root certificate creation (eg. expire date, $DAYS="-days 365" to some more days)
• You may edit "/usr/ssl/openssl.cnf" to configure parameters for client certificate creation (eg. expiry date, CA certificate directory)

(2) Example
(2.1) To create CA root for hugh (CN=root.hugh):
$ cd openssl-0.9.7d/apps
$ mv ./demoCA ./demoCA.old
$ ./CA.pl -newca
CA certificate filename (or enter to create)

Making CA certificate ...
Generating a 1024 bit RSA private key
..++++++
................................................................++++++
writing new private key to './demoCA/private/cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [[AU]]:CA
State or Province Name (full name) [[SomeState]]:BC
Locality Name (eg, city) []:
Organization Name (eg, company) [[InternetWidgitsPtyLtd]]:root.hugh
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:root.hugh
Email Address []:

(2.2) To create ssl certificate to be signed by above CA root for hugh (CN=hugh):
$ ./CA.pl -newreq

Generating a 1024 bit RSA private key
.........++++++
............................++++++
writing new private key to 'newreq.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [[AU]]:CA
State or Province Name (full name) [[SomeState]]:BC
Locality Name (eg, city) []:
Organization Name (eg, company) [[InternetWidgitsPtyLtd]]:hugh
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:hugh
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Request (and private key) is in newreq.pem

(2.3) To sign the above ssl certificate:
$ ./CA.pl -signreq

Using configuration from /usr/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
Serial Number: 1 (0x1)
Validity
Not Before: Aug 13 20:09:36 2004 GMT
Not After : Aug 11 20:09:36 2014 GMT
Subject:
countryName = CA
stateOrProvinceName = BC
organizationName = hugh
commonName = hugh
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key Identifier:
C1:3B:41:29:51:E5:34:B1:E8:AB:4B:F0:1D:6C:6A:19:6E:1B:5D:17
X509v3 Authority Key Identifier:
keyid:D9:25:A7:FD:27:AC:D0:96:D2:0E:61:F5:5A:9B:D0:2F:94:8E:E6:23
DirName:/C=CA/ST=BC/O=root.hugh/CN=root.hugh
serial:00
Certificate is to be certified until Aug 11 20:09:36 2014 GMT (3650 days)
Sign the certificate? [[y/n]]:y

1 out of 1 certificate requests certified, commit? [[y/n]]y
Write out database with 1 new entries
Data Base Updated
Signed certificate is in newcert.pem

(2.4) To package user certificate, private key and CA certificate:
$ ./CA.pl -pkcs12 "Hugh SSL Certificate"

Enter pass phrase for newreq.pem:
Enter Export Password:
Verifying - Enter Export Password:

Now, you have
cacert.pem (found in app/demoCA/)
newcert.p12 (found in app/)
newcert.pem (found in app/)

Copying scripts (*.sh) edited on Windows or cygwin to Linux/Unix machine

If you are copying the scripts (*.sh) edited on Windows or cygwin to Linux/Unix machine (cygwin is fine), please ensure all trailing carriage returns are stipped, else scripts will NOT be interpreted properly:

#!/bin/bash
files=`ls *.sh`
for file in $files
do
echo "processing file -$file "
sed s/^M$//g $file >/tmp/tempfile
mv /tmp/tempfile $file
done