Jump to Navigation

Me on Twitter

  • Looks huge ! #JavaEE8 http://t.co/NffP1OypY0 9 years 25 weeks ago
  • Sometimes #Python has #batteriesincluded sometimes not : see os.makedirs() http://t.co/lffkJy59Rn 9 years 26 weeks ago
  • @espylaub 1 year old already but very clear description of one big mobile software issue today. http://t.co/7q0I4wIRok 9 years 27 weeks ago
  • #ux #antipattern asking for a confirmation to exit the app when the user has already clicked twice or more just to find the button ! 9 years 29 weeks ago
  • UX designers: Side drawer navigation could be costing you half your user engagement http://t.co/o3YkClSmIW 9 years 43 weeks ago
  • CSS fans : The Future of Responsive Digital Layout http://t.co/zkAmlqV9zD 9 years 43 weeks ago
  • new SimpleDateFormat("yyyy-MM-dd kk:mm:ss").format(new Date()).replace(" 24", " 00"); Sorry but... #WTF!!!?? Can you just read the docs ? 9 years 49 weeks ago
  • #Argh ! http://t.co/oQ1MtqHWS7 10 years 2 weeks ago
  • @ubuntu #fail Typing "garmin" to get a GPS plugin in Software Center just finds crap when Synaptic got it right at first try 10 years 3 weeks ago
  • @SpiderOak what's going on with your website ? http://t.co/vS0p3UpsA8 10 years 3 weeks ago

java

java HttpClient 3.x : a portable SSL Socket Factory implementation

I was just trying to implement client and server authentication over SSL on IBM Websphere 6 (JRE 1.4.2)...

[...]

It may sound awkward in 2012, but if you wish the HTTPS server to identify your Java client (versus : only the server is identified), you will have to write your own implementation of a socket factory.

The Java Runtime Environment doesn't provide ready-to-use classes to do this. Yes : there is javax.net.ssl.SSLSocketFactory.getDefault() but it requires to set some system (therefore global) properties to point to the certificates files !!!

Even with Apache's HttpClient (at least version 3.x), you have to use a custom SSLProtocolSocketFactory.

The HttpClient SSL Guide provides sample code to implement mutual client and server authentication ; unfortunately the latest stable release of it (contrib 3.1) is bound to Sun's API with imports such as com.sun.net.ssl.KeyManagerFactory. Needless to say that this will not work on an IBM Websphere JRE...

This article contains an implementation of a SSLProtocolSocketFactory for HttpClient, to whom may be interested...

Syndicate content