Pesistent HTTPS/SSL connections

522 byte By vijayuk12 at 2007-9-30 12:07:01
Dear all,Does anybody knows how to make an HTTPS/SSL connection persistent.We need to make multiple HTTPS requests to a server and we found that most of the time it gets new SSL session ID and makes all the crypto/certificate processing whenever it gets the enw session ID. I have seen (with ...

how connect client to mySQL via SSL

290 byte By Damian_Szczepanik at 2007-9-30 12:08:32
Hi,I created client in Swing/AWT and configured mySQL. How can I configure my client to enable connection via SSL (not necessary with certificate). I have to switch on field in driver JDBC, but that'a all? How can I verify if connection is really encoded?Damian

Persistent HTTPS/SSL connections

517 byte By vijayuk12 at 2007-9-30 12:09:53
Dear all,Does anybody know how to make an HTTPS/SSL connection persistent.We need to make multiple HTTPS requests to a server and we found that most of the time it gets new SSL session ID and makes all the master-secret processing whenever it gets the enw session ID. I have seen (with ...

Unable to achieve client certificate authentication

3599 byte By vinay_bansal at 2007-9-30 12:37:15
I am trying to do mutual certificate authentication (client/server authentication), and getting following error.Anybody has any clue?SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknownMy code is below.-import com.sun.net.ssl.HttpsURLConnection;import java.security.cert.*;import ...

Help!!input pfx,p12 to jks keystore get error "Signature Algorithm mismach"

987 byte By luckymanashcroft at 2007-9-30 12:45:04
The following is the question that I met ~ Who can help me to solve the problem? use j2sdk1.4.02I'm tring to use keytool to input my company's pfx file to jks format keystore ,and I'm getting keytool error "Signature Algorithm mismatch" .I also tried to import the pfx file to Netscape and ...

What happens when mult certificates available for SSL?

838 byte By jimwnet at 2007-9-30 12:57:44
HiWondering if anyone has info on thisWe have an https web url, to be called by a command line java program using JSSEIf the web server in it's keystore has multiple certificates, with Owner Common Name = web server, but let's say one is invalid (client would reject because of no trusted cert ...

Results from KeyManager.chooseClientAlias(...) cached in SSLSocketFactory?

1295 byte By john.gilbert at 2007-9-30 13:00:51
Hi Folks,I've written a custom X509KeyManager as I need to select the certificate that will be used by a client to authenticate with servers from a KeyStore. It appears however that multiple calls to SSLSocketFactory.createSocket("hostname", portnumber) do not call ...

JSSE connection problems

22740 byte By Maaris_Strazdins at 2007-9-30 13:01:18
The situation is as follows:I`m trying to connect from Java to a Tomcat server, which requests SSL client authentication. The client code is known to be working with Java 1.3.1 version, but does not work with Java 1.4.2_01.Usually I could determine the problem looking at the debug information, ...

Default SSL context init failed: jks

2282 byte By RodrigoMadera at 2007-9-30 13:03:55
Hello to all.This is my first post in the Sun forums. I am a C++ programmer migrating to Java.I am writting a SSL client that connects to my SSL-speaking daemon. The code I amtrying is from examples across the internet:CODE BEGINSimport javax.net.ssl.*;import javax.net.*;import ...

java.net.SocketTimeoutException: Read timed out

3999 byte By avinashbandgi at 2007-9-30 13:06:08
Hi All ,I have webservice client connecting to SOAP Servivces through HTTPS using sun JSSE implementation. Everytime i make a webservice call i get the Read timed out exception. I am sure of SSL handshaking is happening. Below is the stack trace. I am behind the proxy as well.Anything obivious ...

java.net.SocketException: SSL implementation not available

162 byte By Lubos_Dolezel at 2007-9-30 13:10:26
Whenever I use createSocket I get this exception:java.net.SocketException: SSL implementation not availableWhat's the problem?

Implementing your own SSL provider

418 byte By lciszak at 2007-9-30 13:21:36
Hello,Im working on a new TLS/SSL implementations. I got all the classes(i.e. sslsocket, etc) ready. The problem i have is that i cant get my socketfactory using SSLFactory.getDefault, because when i do it an exception lang.runtime.exception:export restriction: SunJSSE only is thrown. Is there ...

Regarding Keystore and Truststore

442 byte By vivek.shankar at 2007-9-30 13:27:49
Hi Guys!I am really new to this SSL or TLS.I would like to know what is a keystore and what is a truststore?What r thier uses? what does this pioece of code imply?-Djavax.net.ssl.trustStore=C:\APACHE\Tomcat5\conf\SSL\cacerts ...

REGARDING 1 way SSL and 2 way SSL

977 byte By vivek.shankar at 2007-9-30 13:30:58
HI GUYS!Thanks a lot Audios .Your reply helped me lot! I have a query regarding 1 way ssl and 2 way ssl.I think following is the procedure for 1 way ssl (though i am not sure).I think this is using symmetric algorithm,is it?server sends a public key and certificateclient compares the ...

JSSE newbie question

988 byte By rahul_raj77 at 2007-9-30 13:39:07
Hi I am a newbie in JSSE. I have question,I am using a java client to connect to one of the secure sites in our intranet with the folliwng settings ...

how to watch my local network stream using java?

67 byte By jiffyan at 2007-9-30 13:42:16
how to watch my local network stream using java,help!

Why can't I do this?

855 byte By trevaaar at 2007-9-30 13:47:07
I am writing a program using JSSE for socket encryption. The program spawns one thread for every connection it makes or receives, which handles writing outgoing messages to the socket (the messages are stored in a queue) and reading incoming messages once all the outgoing mesages are ...

Cache SSL Session ID

110 byte By macsharksg at 2007-9-30 14:00:01
Is the caching of SSL Session IDs implemented in JSSE? Is the option enabled by default? Thanks.

SSL and Tomcat

640 byte By bcarro at 2007-9-30 14:04:41
Hi,I'm trying to get SSL installed in Tomcat for my JSP files. I've done the first few steps ok, installing the SSL libraries and adding the new security provider. But when I go to generate the public and private keys, I get an error. I enter the password "changeit" ok, but at the end when I ...

sslsocketfactory.getDefault() halts

2267 byte By ravenm1 at 2007-9-30 14:16:06
HiI am new to Java so please bare with me.I installed j2re on a linux 9 platform no probs and then attempted to get llamachat working (available from sourceforge)I swear the first time I ran it it worked, but every subsequent time it simply sat and did nothing.I added a few print statements to ...

SSL Connection

837 byte By Fostererlo at 2007-9-30 14:23:35
I have the following Exception:"javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found"This is my Source Code:try{SSLSocketFactory factory = HttpsURLConnection.getDefaultSSLSocketFactory();SSLSocket socket = ...

javax.net.ssl.SSLException: Received fatal alert: unexpected_message

3934 byte By sumanad at 2007-9-30 14:55:53
Hi ,I am trying to POST an XML message to a secured server through proxy tunneling. I am using the code sample provided in JW-Tip 111 , in jdk 1.4.2_05 in Solaris 8 .( i.e. using the URL class to get the HTTP Connection)The Secured server implements HTTP/1.1 and SSLv2/ SSLv3.1) when I add ...

self-signed certificate

798 byte By pciucho at 2007-9-30 14:56:10
is there any way to connect to server using ssl, if the server gives self-signed cetrificate?i get this:main, SEND TLSv1 ALERT: fatal, description = certificate_unknownmain, WRITE: TLSv1 Alert, length = 2main, called closeSocket()main, handling exception: javax.net.ssl.SSLHandshakeException: ...

Connecting to HTTPS site

608 byte By kurupharik at 2007-9-30 14:58:52
Hi all,I have a problem with connecting to a HTTPS site from a JSP page. I used the samplecode given in the Tomcat SSL guide in HttpClient for this purpose. But its giving error.First I didnt used the Protocol class to register the https protocol. Then I got an error"SSL handshaking error, No ...

startHandshake failure

1522 byte By magiccity at 2007-9-30 14:59:22
Hi all, I'm getting the following from javax.net.debug=all. Any ideas as to why it cuts off prior to "ServerHello" section?%% No cached client session*** ClientHello, v3.1RandomCookie: GMT: 1092003438 bytes = { 178, 125, 9, 31, 9, 123, 116, 85, 77, 135, 187, 124, 21, 48, 28, 239, 255, 32, 3, ...

Mutual Auth problems

2279 byte By mike_cummins at 2007-9-30 14:59:58
I am working on a program that requires mutual certificate authentication for server to server communication. I have written a JSP page that you call from your client with a XML string input. the JSP page passes the data to another server using SSL. My problem is my certificate is not being ...

mutual authentication

2900 byte By takeuchiyui at 2007-9-30 15:01:20
I have the following problem in mutual authentication.Connection failed: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate foundAt first, I created key and certification as follows.-1. Create CA Authority Key using SSLopenssl genrsa -out ...

Keystore and Truststore

855 byte By lee_the_flee at 2007-9-30 15:07:35
Good day!I'm having problems importing my OpennSSL certificates to my keystore. I created a Root CA using openSSL and used this to sign some CSR's.I was able to import my CA using keytool, using the following command: keytool -keystore myKeystore -import -alias cacert -file cacert.pem Then I ...

Accessing form-based authentication site; j_security_check; httpclient?

409 byte By macraebr1 at 2007-9-30 15:22:22
Can anyone help? I am trying to access a website that uses j_security_check - form-based authentication. I can login fine manually, but cannot get in from my java program.I tried posting the username and password to j_security_check, the login.jsp and the controller page, but I keep getting ...

accepting certificate

488 byte By tsjakamaka at 2007-9-30 15:27:07
Hi,I have an APPLET. In the code of that applet I have to set up (made) a connection with a website. It's a SECURE site (for example https://xxxxxxxxxxxxxxxxxxxxxxx).For making a connection with this site, I have to accept a SELF-written certificate.Is there a way for acception THIS ...

configuring SSL in OC4J

287 byte By lee_the_flee at 2007-9-30 15:28:04
Anyone successfully set up SSL for a standalone OC4J server?If so, how do I set the TrustStore? It should be some simple definition in the http-web-site.xml, but I can't find any docs on what it is.Any help would be greatly appreciated. Thanks!

using ssl certificate in a java client

393 byte By mmoem at 2007-9-30 15:30:01
Hi,I need to connect to a website using https with a client certificate that has been provided to me from the company running the website (url: https://www.blabla.com:8210/) . How can I tell my client program to use this certificate when connecting to the website? (I have been given both .pem ...

Https issue (changing the certificate)

1759 byte By Sernico at 2007-9-30 15:34:35
HelloI am working on a web service testing client, which must be able to access this one in a secure way or not (to validate that it doesn't work in an unsecure way).My problem is that the security properties seem to be persistent in a session.Here is the code I use to be able to use (or not) ...

Working with JSSE using multi-purpose keystore

1289 byte By m_zapf at 2007-9-30 15:38:14
Hello,I am currently working on an application which employs the JCA for providing signatures, authenticating users etc., but *also* working with JSSE.More specifically: The application must be able to verify signatures on code packages created by known users and loaded at runtime; but for ...

HTTPS hostname wrong - but it's not

321 byte By jimcorkey at 2007-9-30 15:42:18
I am getting the hostname wrong error but I don't understand why. After implementing a HostnameVerifier I find that the hostname string and the sslSession.getPeerHost() are identical. Why does the default hostname verification fail?Also, does anyone know what the default hostname verification ...

Question re. JSSE+Tomcat

583 byte By jl_one at 2007-9-30 15:49:52
Hi,I want to set up Tomcat with SSL, with both client and server authentication enabled. As I understand it, JSSE is used to provide the SSL enablement, and it's possible to configure for client certificate authentication.Since I'm going to be using client certs, I also want to have the ...

validity period of self signed certificate

258 byte By john_student at 2007-9-30 16:02:02
i have created the self signed certificate, in which the validity period ,by default is 90 days.After 90 days it gets expired.i dont want it to get expired rather use it for permanent?is it possilble....?Regards,John

one server certificate for one application? not for whole WebServer

944 byte By hanlixin at 2007-9-30 16:12:45
Hello, I am using SSL for the server- and clieint authtication. It works fine. But this authtication works for all applcations in this Webserver. How can I make it only for one application available? or one server certifiate for a certain application?Example:Config:<Connector port="8443" ...

SSL alert number 46

812 byte By lee_the_flee at 2007-9-30 16:29:31
I start up my Tomcat server with a keystore, truststore and clientAuth=true, and tried connecting it via "openssl s_client" and everything works well. Setting up my OC4J (Oracle 9ias) using the same keystore, truststore and needs-client-auth=true, I get the following error when I try to connect ...

verisign certificates

346 byte By vidhyajay at 2007-9-30 16:34:18
hi all,i have created a client server program using JSSE with SSL where i have used self sign certificates using keytool for Keystore. But i would like to have Verisign Certificates.Does verisign provide cerificate for J2sdk1.4.1 ?Kindly help...!!!!!....iam not able to ...

Ensuring secure connection

351 byte By willdog23 at 2007-9-30 16:36:55
Hello,I have not done a lot of ssl programming so my question is this. By using the SSLSocket, is there anything else that i have to do to ensure that my connection is secure? Am i right to assume that this acts "as a browser" and downloads the certificates needed when i start the handshake to ...

Java SSL Server serving non-Java Clients ?

426 byte By ashwinee_k at 2007-9-30 16:37:33
Hi,I am trying to figure out how I can get Java server and a C client communicate securely.On the client side, I can use IPsec to authenticate and encrypt messages. JSSE does most of the things and even more, but I could not find any documentation that explains underlying details so that I can ...

Screen Scraping Vs Sockets

724 byte By oracle3001 at 2007-9-30 16:38:54
HI All,I would like to know how to go about scraping information from a 3rd party desktop client window, that is talking to a remote server.Specifiacally, it is the poker clients like the ones you download and run to play on say Party Poker. I want to write an application to scrape various ...

Could not find trusted cert in chain

761 byte By middlewareonline at 2007-9-30 16:41:57
Hi, Environment: The server and client are both located on the same Sun Solaris 2.8 box. MQ Series V 5.3 CSD07 Could not find trusted cert in chain. main, SEND SSL v3.0 ALERT: fatal, description = certificate_unknown main, WRITE: SSL v3.0 Alert, length = 2 JMSException thrown ...

does SSL work with out CA signing ?

799 byte By S.M.Humayun at 2007-9-30 16:47:59
How can i test mutual authentication mode in SSL, when I didnt have CA signed certificate ? I just want to test the code whether it is working fine or not. My code is almost ready, every thing is working fine with SSL when i switch off client authentication mode. But when i switch on client ...

User Name- and Password-Based Mutual Authentication

968 byte By d3m0 at 2007-9-30 16:52:17
Hi, The J2EE 1.4 Tutorial Update 1 shows an example of Client-Certificate Authentication over HTTP/SSL with JAX-RPC, but no User Name- and Password-Based Mutual Authentication example.Does this work the same? Does the client need a certificate for User Name- and Password-Based Mutual ...

SSL Handshake Exception

401 byte By sanjib_sengupta at 2007-9-30 16:54:19
I am using my action class file under tomcat 4.1.27 to talk to a web service hosted over SSL.A stand alone java program can successfully talk to this srevice.But when I try putting it under tomcat , it fails with javax.net.ssl.SSLHandshakeException: sun.security.validator.validatorException: No ...

Applet problem

521 byte By tsjakamaka at 2007-9-30 16:58:02
Hi,I have developed an applet in eclipse (eclipse = a free java developing program). When I execute the applet in Eclipse, the applet runs correctly.But when I run the applet in a browser (internet Explorer or Mozilla FireFox), my applet doesn't work correctly.I think that the problem is in ...

How to use Session ID info to send sequent requests to Https Server ?

675 byte By tnttnttnttnt at 2007-9-30 17:03:28
Hey , Gurus!Another problem for your talents :By using InputStream , I gain all info sent back from the Https server . And Session ID info is included , such as Session ID: {130, 17, 0, 0, 130, 170, 25, 235, 97, 13, 66, 95, 24, 241, 214, 8, 121, 216, 121, 64, 168, 15, 69, 65, 191, 192, 216, 68, ...

EOFException & SSLHandshakeException

7389 byte By yoram at 2007-9-30 17:08:54
Hi, I am trying to connect to an ldap server via sslI get this message:main, received EOFException: errormain, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshakemain, SEND TLSv1 ALERT: fatal, description = handshake_failuremain, WRITE: TLSv1 ...