ansaurus

Question

Java Secure Webservice

Answer 1

A:

These seem like similar issues:

Link 1

Same problem.

Link 2

Accepts all certificates.

private static final HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() {
   public boolean verify(String hostname, SSLSession session) {
      return true;
   }
};
...
HttpsUrlConnection con = (HttpsUrlConnection)new URL("https://foo.bar.com").openConnection();
con.setHostnameVerifier(DO_NOT_VERIFY);
InputStream in = con.getInputStream();

However I am not certain where to put this. Client side or server side? Regardless I would rather just set up the certificates properly if that is an option.

Link 3

Uses this solution:

HostnameVerifier ver = new HostnameVerifier()
{
  public boolean verify(String urlHostname,String certHostname)
  {
    return java.net.InetAddress.getByName(urlHostname).equals(java.net.InetAddress.getByName(certHostname));
  }
};
com.sun.net.ssl.HttpsURLConnection con = ...(obtain connection);
con.setHostnameVerifier(ver);

However I am not certain where to put this. Client side or server side? Regardless I would rather just set up the certificates properly if that is an option.

sixtyfootersdude 2010-02-02 18:53:38

Answer 2

A:

I am pretty sure that this post solves the issue however it is too cryptic to understand. Come back to this.

http://forums.sun.com/thread.jspa?threadID=5315653

sixtyfootersdude 2010-02-03 16:27:35

Answer 3

A:

This solution is helpful as well.

http://stackoverflow.com/questions/1168969/javas-keytool-command-with-ip-addresses

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLSession;

HostnameVerifier hv = new HostnameVerifier() {
    public boolean verify(String urlHostName, SSLSession session) {
        System.out.println("Warning: URL Host: " + urlHostName + " vs. " + session.getPeerHost());
        return true;
    }
};

HttpsURLConnection.setDefaultHostnameVerifier(hv);

sixtyfootersdude 2010-02-03 16:31:05

ansaurus

tags:

views:

answers:

Java Secure Webservice

Update 1

Update 2

Update 3

Link 1

Link 2

Link 3

related questions