Jump to Navigation

Me on Twitter

  • Corporate firewall blocking technical docs ? this bookmarklet shows a QRCode to scan & browse w/ur mobile device https://t.co/5iKy9wouPF 10 years 17 weeks ago
  • RT @TheBrousse: Creating Mobile Apps with Appcelerator Titanium is available now on Amazon! http://t.co/7apIeI9xPM 10 years 22 weeks ago
  • Direct URL : https://t.co/lvockaoeFB #GooglePlay #CandyCrushSaga 10 years 22 weeks ago
  • Also check out Candy Crush Unlimited for free lives https://t.co/Jd6wRO9Ct7 #CandyCrushSaga 10 years 22 weeks ago
  • Candy Crush Score 1.0.2 is on #GooglePlay #CandyCrushSaga 10 years 22 weeks ago
  • #CandyCrushSaga now has its #android app to compare your #scores and confront other players https://t.co/lvockaoeFB 10 years 24 weeks ago
  • How many hours lost on #android dev to find the right excludes with #proguard (even with Google's own support lib)... 10 years 24 weeks ago
  • Programming Handheld Systems with Android from @UofMaryland on @Coursera! https://t.co/T3Dcx6F3ZV #android 10 years 25 weeks ago
  • After several evenings fighting against proguard #AngryBirdsScore finally alpha ! http://t.co/istewvTFsH #angrybirds  #AngryBirdsStarWars2  10 years 26 weeks ago
  • Android workshop at @osaxis tonight ! 10 years 27 weeks ago

https

java HttpClient 3.x : a portable SSL Socket Factory implementation

I was just trying to implement client and server authentication over SSL on IBM Websphere 6 (JRE 1.4.2)...

[...]

It may sound awkward in 2012, but if you wish the HTTPS server to identify your Java client (versus : only the server is identified), you will have to write your own implementation of a socket factory.

The Java Runtime Environment doesn't provide ready-to-use classes to do this. Yes : there is javax.net.ssl.SSLSocketFactory.getDefault() but it requires to set some system (therefore global) properties to point to the certificates files !!!

Even with Apache's HttpClient (at least version 3.x), you have to use a custom SSLProtocolSocketFactory.

The HttpClient SSL Guide provides sample code to implement mutual client and server authentication ; unfortunately the latest stable release of it (contrib 3.1) is bound to Sun's API with imports such as com.sun.net.ssl.KeyManagerFactory. Needless to say that this will not work on an IBM Websphere JRE...

This article contains an implementation of a SSLProtocolSocketFactory for HttpClient, to whom may be interested...

Syndicate content