Soteriologist

As I understand both OrdersWebSvc and ProfilesWebSvc should be using SSL.

I've set both web services on my development server with SSL enabled.

I've also ran the self-ssl tool so that they have certificates.

I can connect to both webservices fine, as both the local admin on the machine going to: https://localhost/OrdersWebService/OrdersWebService.asmx and https://localhost/ProfilesWebService/ProfilesWebService.asmx respectively

AS WELL as logged on as a domain user:

https://servername/OrdersWebService/OrdersWebService.asmx and

https://servername/ProfilesWebService/ProfilesWebService.asmx

Of course, because I'm using self-ssl to generate my certificates, IE 7 throws me a warning that: "There is a problem with this website's security certificate" and gives me the option to continue on through to the site.

The problem is that when I try to connect to the server through the "Customer and Orders Manager" client business application on my machine, and I point it to

https://servername/OrdersWebService/OrdersWebService.asmx and

https://servername/ProfilesWebService/ProfilesWebService.asmx

and click ok to connect, it waits for a bit and then returns me an error dialog that states:

"The Orders Web Service https://servername/OrdersWebService/OrdersWebService.asmx is currently unavailable. The Web Service might be experiencing technical difficulties, or you may need to adjust your connection settings."

I look in the application log on the server and I see nothing there.

I can bring up all of the other client business applications and connect to all of the other web services fine (but of course they don't use ssl).

One other related issue is that inside the "Catalog Manager" client business application when I try to "Refresh Site Cache" it throws me the error of:

"One or more errors occured while refreshing the site cache. The following servers reported errors:

The server 'servername' of the application 'OrdersWebService' returned HTTP status code 403 (Forbidden). The cache refresh URL used was 'http://servername/OrdersWebService/SiteCacheRefresh.axd CaceToRefresh=CatalogCache'.

See the server event log for more details."

I checked out the application log on the server and it generally said about the same thing... and obviously the problem is that it's trying to connect using a non-ssl connection when the web service has SSL enabled.

So I go to the orders web service and disable SSL.

Now I can refresh the site cache using the "Catalog Manager" BUT then when I try to edit the "Current Connection" string for the "Customer and Orders Manager" "Orders Web Servervice" connection to a non-ssl one of http://servername/OrdersWebService/OrdersWebService.asmx" it throws me the error:

"HTTPS connection is required for Orders and Profiles web service."

So I'm absolutely stuck. One app requires ssl (as it should) but then another one tries to refresh the cache using a non-ssl connection. I can get the cache to refresh if I disable ssl, but that's not suggested and for good reason.

PLEASE PLEASE PLEASE haaalp meeeee!!!!!




Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Wiggles

I had similar problems and errors when my SSL expired. See this post:

http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=1564209&SiteID=1

Does re-running SelfSSL.exe resolve the problem





Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Agha Asif Raza

Try adding your selfssl certificate to the list of trusted certificates in IE. Browse to the orders web service in IE, when presented with the certificate warning page, select continue to proceed. Now, along with the address bar of the browser, you'll see a certificate error notification, click on it, select view certificate and then click on 'install certificate'. If its a certificate issue thats blocking ur access to the web service through the management applications, it shouldn't block anymore.

Also, the following blog post may be of some help:

http://geekswithblogs.net/bkail/archive/2007/04/18/111782.aspx

Hope this helps,

--

Agha





Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Soteriologist

Wiggles: I'd already ran the selfssl tool and set the certificate for to expire in 100 days, and that was only 5 days ago, but thank you for the tip.

Agha Asif Raza: Thank you so much! This has solved a part of my problem. I can now get into the "Customer and Orders Manager" fine. No errors, etc.

The problem I still have is inside the "Catalog Manager": when I try to refresh the site cache it's trying to use a non-ssl address string to refer to the orders web service and because I have ssl turned on for the web service it doesn't allow the refresh.






Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Soteriologist

I've figured out how to solve the problem.

It's a bit tideous, but for now is the required step to make sure your site is secure:

Instead of enabling SSL on the entire OrdersWebService,

I've disabled it for the root directory,

BUT enabled it on every file and directory within the root.

The site cache refresh is an http handler that is linked to in the root directory.

So with ssl disabled for the root the non-ssl link that the Catalog Manager uses (http://servername/OrdersWebService/SiteCachRefresh.axd CacheToRefresh=CatalogCache) to refresh the site cache is allowed

BUT all other links to files within the directory required an SSL connection.

It just kinda of stinks that one business management application requires SSL and another requires not to have SSL.






Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Agha Asif Raza

Soteriologist,

I think the right solution for your problem may be to enable (if not already) HTTPS for OrdersWebService from Commerce Server Manager.

To do that, open Commerce Server Manager, and point to Commece Sites -> [Site Name] -> Applications -> [OrdersWebService]. Right-click open the 'Properties'. You'll find a checkbox there to 'Enable HTTPS'. Set it to checked.. Now try refreshing the site cache through Catalog Manager. It should work now.

Hope this helps,

---

Agha





Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Soteriologist

Thank you for your reply.

I un-did all of the steps I took before of manually setting up ssl through IIS manager and took the steps you suggested for enabling ssl for both the profiles and orders web services inside the Commerce Server Manager.

Now when I try to open up the "Customer and Orders Manager" business user application it requires me to enter my credentials (which I do) and it authenticates me fine.

BUT when I try to refresh the site cache through either the "Catalog Manager" or the "Marketing Manager" an error box pops up stating: "An unexpected server error occured. If the problem persists, contact your administrator."

So I go to my server and check out the application log and no errors show. Instead an item stating: "The cache 'CatalogCache' has been refreshed for the site 'StarterSite'" is listed. So it looks like everything "works" but what's the deal with the error message

Also, I can browse fine to both:

http://servername/OrdersWebService/SiteCacheRefresh.axd CacheToRefresh=CatalogCache

and

https://servername/OrdersWebService/SiteCacheRefresh.axd CacheToRefresh=CatalogCache

in IE... It asks for my credentials, I log in as one of the users I set permissions for in the web.config and it runs fine.






Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Soteriologist

*BUMP*




Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Agha Asif Raza

Soteriologist,

The error you're getting is a bit strange and unfortunately not too informative .. I'm not sure if this will help, but can you verify the permissions settings in the web.config file of your web site and the OrdersWebService. Here's a pointer to another thread that may help you verify this: http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=1430693&SiteID=1

Regards,

Agha





Re: Commerce Server 2007 OrdersWebSvc and ProfilesWebSvc SSL Problem

Soteriologist

Well... I had already setup the proper permissions for my different web services, but I went through and followed the instructions found in a link referred to within the link you posted (http://msdn2.microsoft.com/en-us/library/aa546079.aspx) and sadly I still get the error.

BUT!!! I did make progress towards the solution, looks like it's an error with the actual application itself. I found errors logged for it on my local application log stating:

***********************************

Event Type: Error
Event Source: Commerce Server Business UI
Event Category: None
Event ID: 100
Date: 5/29/2007
Time: 10:30:38 AM
User: N/A
Computer: ComputerName
Description:
System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> There was an error generating the XML document. ---> Instance validation error: '0' is not a valid value for System.Net.HttpStatusCode.
at Microsoft.CommerceServer.ServiceAgent.TryHandleWebMethodException(Exception ex, SoapHttpClientProtocol serviceProxy)
at Microsoft.CommerceServer.Catalog.WebService.Proxies.CatalogWebService.AuthorizedInvoke(String methodName, Object[] parameters)
at Microsoft.CommerceServer.Catalog.WebService.Proxies.CatalogWebService.RefreshSiteCache()
at Microsoft.CommerceServer.Catalog.CatalogAgentContext.RefreshSiteCache()
at Microsoft.CommerceServer.Catalog.CatalogContext.RefreshSiteCache()
at Microsoft.CommerceServer.UI.CatalogManager.CatalogManager.cntxtMenuRefreshSiteCache_Click(Object sender, EventArgs e)

***********************************

And it looks like there's a knowledge base article regarding a hotfix for it (http://support.microsoft.com/kb/922068) but I'll have to contact customer support for it.

I've been experiencing another bug with the Catalog and Inventory Schema Manager. When you hit the "Edit Property Metadata" link the program crashes. It's the same problem people are experiencing here: http://forums.microsoft.com/msdn/showpost.aspx postid=1141608&siteid=1&sb=0&d=1&at=7&ft=11&tf=0&pageid=1

I hope they come out with Service Pack 1 soon.

Thank you so much for your help/replies!!!