Java - ssl certificate with JAX-WS client

Question

I have imported the self sign certificate from the server using keytool and all work well.

Problem is that it works only when the CN name is use "example.corp.org" for the https: url with JAX-WS client. I get an error if i try to use the server IP address:

Exception in thread "AWT-EventQueue-0"     com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present

I understand why i am getting the error but for a varies reasons i need to use the server IP address to connect to it and not the CN name.

Anyone have any suggestions?

Thanks Alexis

Evgeniy Dorofeev · Accepted Answer · 2013-05-03 12:52:28Z

1

You should add Subject Alternative Name to the certificate

subjectAltName=IP:serverIp

answered May 3, 2013 at 12:52

Evgeniy Dorofeev

137k31 gold badges209 silver badges288 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

alexis Over a year ago

how could i do that? I am guessing this is done using keytool? if i am correct would there be a workaround that i can do within the java code?

alexis Over a year ago

I should have also said that i have no control over the self sign certificate i download from the server.

alexis · Accepted Answer · 2013-05-03 14:11:17Z

0

sort of resolve it... found the answer here: https://forums.oracle.com/forums/thread.jspa?messageID=6411944

HostnameVerifier myhostnameverifier = new HostnameVerifier() 
{
@Override
public boolean verify(String urlHostName, SSLSession session) 
{
return true;
}
};
HttpsURLConnection.setDefaultHostnameVerifier(myhostnameverifier);

answered May 3, 2013 at 14:11

alexis

1,2513 gold badges21 silver badges48 bronze badges

Collectives™ on Stack Overflow

Java - ssl certificate with JAX-WS client

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related