Wildfly-允许无需证书即可连接到SSL站点

Question

Is there a way for a web application to be configured (through web.xml) to allow connections to SSL sites withour certificates similar to curl 's -k option?

-k, --insecure Allow connections to SSL sites without certs (H)

eg using curl we can do this:

# curl -vk --data "appip=adsfa123&login=testt@jelastic.com&password=adfas1123" https://app.sample-jelastic-server.com/1.0/users/authentication/cross/signin

My problem is that my web application is not able to access sites with HTTPS from within the container (or from server).

It is throwing this error:

at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)

With this, I think if we can configure the web.xml to allow connections to SSL site without certs then that should fix that.

Answer 1

You need to add the following in the standalone.conf file.

JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStore=/<Path>/conf/xyz.keystore -Djavax.net.ssl.trustStorePassword=password"

In the xyz.keystore , add the certificates of the application you are trying to invoke. The system keystore is automatically added by the wildfly.

You can debug the ssl request and response you can add another configuration to the wildfly start up -Djavax.net.debug=all more on it here