java - allowUnsafeRenegotiation, but still CertificateException -


i try use soapconnection call https, , have point keystore , truststore follow:

    system.setproperty("javax.net.ssl.keystore", "c:/kei/tasks/mip/cert/ccc_acp.keystore");     system.setproperty("javax.net.ssl.keystorepassword", "password");     system.setproperty("javax.net.ssl.truststore", "c:/kei/tasks/mip/cert/trusteaistore.keystore");     system.setproperty("javax.net.ssl.truststorepassword", "password");     system.setproperty("javax.net.debug", "all");

but still

javax.net.ssl.sslhandshakeexception: java.security.cert.certificateexception: no subject alternative names present

i google , find follow temporary solution

system.setproperty( "sun.security.ssl.allowunsaferenegotiation", "true" );

but set allowunsaferenegotation true, still

javax.net.ssl.sslhandshakeexception: java.security.cert.certificateexception: no subject alternative names present

and try use soapui 5.1.3, , in preference> ssl, set keystore , keystore password (but no place set truststore), time can connect target server through https!

so

1) why soapui 5.1.3 not need set truststore (but keystore), still can connect https server?

2) why use system property point same keystore, cannot connect https server using soapconnection?

3) why set allowunsaferenegotitation system property true, seems still check public cert. of https server, , return certificateexception?

***************** edit on 15/5/2015

i post code here

public static void main(string args[]){      system.setproperty("javax.net.ssl.keystore", "c:/kei/tasks/mip/cert/ccc_acp.keystore");     system.setproperty("javax.net.ssl.keystorepassword", "password");     mipcccsoaptest mipcccsoaptest = new mipcccsoaptest();     mipcccsoaptest.testhttpconnection();         }  private void testhttpconnection(){     try{         dotrusttocertificates();                      url url = new url("https://10.7.3.43:9443/iboss/customercarem1");          httpsurlconnection conn = (httpsurlconnection)url.openconnection();           httpsurlconnection.getdefaultsslsocketfactory();          system.out.println("responsecoede ="+conn.getresponsecode());     }catch(exception ex){         ex.printstacktrace();     }     system.exit(0);     //end testing }  // trusting certificate   public void dotrusttocertificates() throws exception {     security.addprovider(new com.sun.net.ssl.internal.ssl.provider());     trustmanager[] trustallcerts = new trustmanager[]{             new x509trustmanager() {                 public x509certificate[] getacceptedissuers() {                     return null;                 }                  public void checkservertrusted(x509certificate[] certs, string authtype) throws certificateexception {                     return;                 }                  public void checkclienttrusted(x509certificate[] certs, string authtype) throws certificateexception {                     return;                 }             }     };      sslcontext sc = sslcontext.getinstance("ssl");     sc.init(null, trustallcerts, new securerandom());     httpsurlconnection.setdefaultsslsocketfactory(sc.getsocketfactory());     hostnameverifier hv = new hostnameverifier() {         public boolean verify(string urlhostname, sslsession session) {             if (!urlhostname.equalsignorecase(session.getpeerhost())) {                 system.out.println("warning: url host '" + urlhostname + "' different sslsession host '" + session.getpeerhost() + "'.");             }             return true;         }     };     httpsurlconnection.setdefaulthostnameverifier(hv); }

and following error

javax.net.ssl.sslhandshakeexception: received fatal alert: handshake_failure @ sun.security.ssl.alerts.getsslexception(unknown source)

but keystore should correct use same keystore in soapui 5.1.3 can call server.

**************** edit on 18/5/2015 *************

after comment out following code

security.addprovider(new com.sun.net.ssl.internal.ssl.provider());     trustmanager[] trustallcerts = new trustmanager[]{             new x509trustmanager() {                 public x509certificate[] getacceptedissuers() {                     return null;                 }                  public void checkservertrusted(x509certificate[] certs, string authtype) throws certificateexception {                     return;                 }                  public void checkclienttrusted(x509certificate[] certs, string authtype) throws certificateexception {                     return;                 }             }     };      sslcontext sc = sslcontext.getinstance("ssl");     sc.init(null, trustallcerts, new securerandom());     httpsurlconnection.setdefaultsslsocketfactory(sc.getsocketfactory());

it can connect https server now.

javax.net.ssl.sslhandshakeexception: java.security.cert.certificateexception: no subject alternative names present

this problem servers certificate. need fix there adding subject alternative section proper information can validated. has nothing trust chain, no changes keystore or truststore help. more information might given if servers url or certificate known.

system.setproperty( "sun.security.ssl.allowunsaferenegotiation", "true" );

this tls protocol level thing , has nothing certificate validation.

in case cannot fix servers certificate see sslhandshakeexception: no subject alternative names present possible workaround (first hit when googling error message!).


Comments

Post a Comment

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

i added new project. made mistake in projectname.conf file in sites-available apache2, led me reinstalling apache2. after reinstalling , re-enabling projects on every page of every project .. <body> run(); </body> .. i've run composer update, restarted service, restarted pc, checked config files, tried disabling new project. there nothing in error log, , access.log: 127.0.0.1 - - [15/may/2015:01:40:47 +0200] "get / http/1.1" 304 181 "-" "mozilla/5.0 (x11; ubuntu; linux x86_64; rv:38.0) gecko/20100101 firefox/38.0" maybe i'm forgetting apache2 reinstall? don't think did different last time installed it. looks haven't setup php correctly. take @ this great guide , maybe you're forgetting link php config apache2.
Read more

php - How can I echo out this array? -

i don't know how go grabbing data in variable , put foreach loop. class tree{ private $info = array( array('name'=>'jim','state'=>'nu','company'=>'nu','phone'=>array('cell'=>'5615111111','office'=>'5611111111'),'email'=>array('primary'=>'exs@example.com','ex@there.com')), array('name'=>'joe smith','city'=>'phoenix','phone'=>'4805551111','email'=>'jsmith@some_email.com'), array('name'=>'john doe','city'=>'chandler','company'=>'doe co.','email'=>array('jdoe@gmail.com','personal'=>'email@email.com'),'phone'=>'6025550002') ); } if you're inside of class, can access private variable using $this->variablename . example, i...
Read more