Java-JAX-WS客户端的SSL证书

Question

I have imported the self sign certificate from the server using keytool and all work well.

Problem is that it works only when the CN name is use "example.corp.org" for the https: url with JAX-WS client. I get an error if i try to use the server IP address:

Exception in thread "AWT-EventQueue-0"     com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present

I understand why i am getting the error but for a varies reasons i need to use the server IP address to connect to it and not the CN name.

Anyone have any suggestions?

Thanks Alexis

Answer 1

您应该将主题备用名称添加到证书中

subjectAltName=IP:serverIp

Answer 2

sort of resolve it... found the answer here: https://forums.oracle.com/forums/thread.jspa?messageID=6411944

HostnameVerifier myhostnameverifier = new HostnameVerifier() 
{
@Override
public boolean verify(String urlHostName, SSLSession session) 
{
return true;
}
};
HttpsURLConnection.setDefaultHostnameVerifier(myhostnameverifier);