BEA-090563 -- Cannot create instance of Hostname Verifier

Question

I am trying to use custom hostname verifier for my osb project and following are the steps.
1. Create java class -- given below as reference...
2. Add the full class name @ Admin server --> ssl --> Advanced --> custom hostname verifier -- also choose custom hostname verifier in the host name verification field above it.
3. Package the class in the jar file using eclipse export java project and place the file in server-lib folder.
4. Restart admin and osb server.
I am facing following error ---
osb_domain.log00932:####<Aug 3, 2012 12:01:41 PM EST> <Error> <Security> <server host name> <osb_server1> <[ACTIVE] ExecuteThread: '
1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <6cf4c9e4b2f5468a:-4668cc77:138ea27406f:-8000-000000000000095d> <134
3959301805> <BEA-090563> <Cannot create instance of Hostname Verifier <package name>:WildcardHostnameVerifier.>
Can somebody let me know if there are any additional settings required for this to work ?
JAVA CLASS
package <package name>;
import java.io.ByteArrayInputStream;
import java.security.cert.Certificate;
import java.security.cert.CertificateEncodingException;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import javax.net.ssl.SSLPeerUnverifiedException;
import javax.net.ssl.SSLSession;
import weblogic.security.SSL.HostnameVerifier;
* @author Ravi_Shah01
public class WildcardHostnameVerifier implements HostnameVerifier {
     /* (non-Javadoc)
     * @see com.certicom.net.ssl.HostnameVerifier#verify(java.lang.String, javax.net.ssl.SSLSession)
     public WildcardHostnameVerifier() {
          System.out.print("Creating instance of WildcardHostnameVerifier");
     public boolean verify(String hostname, SSLSession session) {
          try {
               Certificate cert = session.getPeerCertificates()[0];
               byte [] encoded = cert.getEncoded();
               CertificateFactory cf = CertificateFactory.getInstance("X.509");
               ByteArrayInputStream bais = new ByteArrayInputStream(encoded);
               X509Certificate xcert = (X509Certificate)cf.generateCertificate(bais);
               String cn = getCanonicalName( xcert.getSubjectDN().getName() );
               if(cn.equals(hostname))
                    return true;
               Pattern validHostPattern = Pattern.compile("\\*\\.[^*]*\\.[^*]*");
               Matcher validHostMatcher = validHostPattern.matcher(cn);
               if(validHostMatcher.matches())
                    String regexCn = cn.replaceAll("\\*.", "(.)*[\\.\\$]");
                    Pattern pattern = Pattern.compile(regexCn);
                    Matcher matcher = pattern.matcher(hostname);
                    if(matcher.matches())
                         if(matcher.group().equals(hostname))
                              return true;
                         else
                              return false;
                    else
                         return false;
               else
                    return false;
          } catch (SSLPeerUnverifiedException e) {
               e.printStackTrace();
               return false;
          } catch (CertificateEncodingException e) {
               e.printStackTrace();
               return false;
          } catch (CertificateException e) {
               e.printStackTrace();
               return false;
     * Return just the canonical name from the distinguishedName
     * on the certificate.
     * @param subjectDN
     * @return
     private String getCanonicalName(String subjectDN) {
          Pattern pattern = Pattern.compile("CN=([-.*aA-zZ0-9]*)");
          Matcher matcher = pattern.matcher(subjectDN);
          if(matcher.find())
               return matcher.group(1);
          return subjectDN;
}

Answer 1

Hi Ravi,
3. Package the class in the jar file using eclipse export java project and place the file in server-lib folder.Instead of placing the jar in server-lib, please modify setDomainEnv.cmd/setDomainEnv.sh as below to add jar in the classpath-
set CLASSPATH=<Your_Jar_PATH>;%CLASSPATH%
Restart WebLogic Server and re-test.
From Weblogic 10.3.4 onwards there is a patch available to enhance the existing default BEA hostname verifier to include wildcard certificates and wildcard host name verifier is available in Weblogic 10.3.6
Regards,
Anuj