Jump to Navigation

Me on Twitter

  • @Delicious Android app does not launch anymore (since 5.1 OTA update, looks like). I've sent bug reports, are u working on it ? 8 years 47 weeks ago
  • @Groomboxfr appli introuvable sur #GoolePlay 8 years 48 weeks ago
  • #FirefoxHello Video chat without account : hope it's gonna be the standard ! https://t.co/0ChutMrHsN 9 years 4 weeks ago
  • RT @initializr: http://t.co/Hrgl0bZGlW is now serving H5BP 5.0! 9 years 7 weeks ago
  • APIs should not be copyrightable. No comment. http://t.co/Ke2OnStFSX 9 years 13 weeks ago
  • Just got a "retry in 20s" toast on the lock screen for the 1st time. Looks linked 2 #lollipop bug fixes http://t.co/n0juzwaQ4H 9 years 15 weeks ago
  • @nic0b0 Ha ! Finally.. #android5.0.1 up and running. Let's see what's new... 9 years 15 weeks ago
  • Just seen an #Android5.0.1 update notification on my phone then... nothing... ??? 9 years 15 weeks ago
  • Looks like there's going to be an #Android5.1 "#Lollipop fails: the 5 worst things about #Android 5.0" http://t.co/xa54ShFaLw 9 years 17 weeks ago
  • #YotaPhone2 Definitely sexy phone http://t.co/CLV30ntTkl 9 years 17 weeks ago

https

java HttpClient 3.x : a portable SSL Socket Factory implementation

I was just trying to implement client and server authentication over SSL on IBM Websphere 6 (JRE 1.4.2)...

[...]

It may sound awkward in 2012, but if you wish the HTTPS server to identify your Java client (versus : only the server is identified), you will have to write your own implementation of a socket factory.

The Java Runtime Environment doesn't provide ready-to-use classes to do this. Yes : there is javax.net.ssl.SSLSocketFactory.getDefault() but it requires to set some system (therefore global) properties to point to the certificates files !!!

Even with Apache's HttpClient (at least version 3.x), you have to use a custom SSLProtocolSocketFactory.

The HttpClient SSL Guide provides sample code to implement mutual client and server authentication ; unfortunately the latest stable release of it (contrib 3.1) is bound to Sun's API with imports such as com.sun.net.ssl.KeyManagerFactory. Needless to say that this will not work on an IBM Websphere JRE...

This article contains an implementation of a SSLProtocolSocketFactory for HttpClient, to whom may be interested...

Syndicate content