Working example code: SSLSocketFactory sslsocketfactory = (SSLSocketFactory) SSLSocketFactory.getDefault() These properties need to be set (either on the commandline, or in code): =pkcs12 Keytool -import -alias gridserver -file gridserver.crt -storepass $PASS -keystore gridserver.keystore The self-signed server certificate must be imported into a truststore:
The missing links was (mostly) the first of the parameters below, and to some extent that I overlooked the difference between keystores and truststores. Got a strong hint here (Gandalfs answer touched a bit on it as well). I am not even sure that the client certificate is the problem here.įinally solved it ). do anything with the inputstream results in: InputStream inputstream = sslsocket.getInputStream() SSLSocket sslsocket = (SSLSocket) sslsocketfactory.createSocket("somehost.dk", 3049) I've tried skipping the HttpsURLConnection class (not ideal since I want to talk HTTP with the server), and do this instead: SSLSocketFactory sslsocketfactory = (SSLSocketFactory) SSLSocketFactory.getDefault() : Received fatal alert: handshake_failure InputStream inputstream = conn.getInputStream() HttpsURLConnection conn = (HttpsURLConnection)url.openConnection() Ĭonn.setSSLSocketFactory(sslsocketfactory)
JAVA HTTP CLIENT JAVA 8 FREE
Calling the close () methods on the InputStream or OutputStream of an HttpURLConnection after a request may free network resources associated with. I've tried two approaches and neither gets me anywhere.įirst, and preferred, try: SSLSocketFactory sslsocketfactory = (SSLSocketFactory) SSLSocketFactory.getDefault() Each HttpURLConnection instance is used to make a single request but the underlying network connection to the HTTP server may be transparently shared by other instances.
JAVA HTTP CLIENT JAVA 8 HOW TO
However, I'm now stuck on how to use the client certificate. The name of the keystore file seems to suggest that the client certificate is not supposed to go in there?Īnyway, adding the root certificate to this store solved the infamous : : PKIX path building failed' problem. I've added the server root certificate and the client certificate to a default java keystore which I found in /System/Library/Frameworks/amework/Versions/1.6.0/Home/lib/security/cacerts (OSX 10.5). The server is using an selfsigned root certificate, and requires that a password-protected client certificate is presented. I am using Java 6 and am trying to create an HttpsURLConnection against a remote server, using a client certificate.
0 kommentar(er)
