Can unencrypted items in a https connection be hidden?

Some time ago, IE had an option to hide unencrypted items in a https connection. I can't find such an option now, so I can't give more details. Bu the point is: can Firefox do that? Some sites have only partially encrypted connections and to me it is important do distuinguish what is secure and what is not in such sites. One sad example is the very support page for Mozilla produtcs (see below).
Thanks in advance.

Firefox does not have this option, but is supposed to warn you about unencrypted content with https even if the page has some encrypted data.
Usually you won't have to worry that much about 'some unencrypted' data since most of the time they are images.

Similar Messages

Can Login Items be disabled instead of just hidden/removed?

cderalow wrote in another thread:
"system preferences
accounts
login items
uncheck as applicable "
I always thought unchecking just made the app hidden on login but still launched. Is there a way of disabling items in this window instead of deleting them?
Thanks.
:-Joe

Oh, I see. Hmmm, unfortunately, I can't think of an easy way to do that, off hand.
The "login items" in the "Accounts" pref pane are recorded in the user's "~/Library/Preferences/loginwindow.plist" file. Conceptually, you could do what you are asking by backing up the original file, removing all login items, then editing the real file manually by copying back individual items from the backup. I suppose this might be slightly easier than having to open "System Preferences", then navigating to each individual item to be added back after each log in test -- but not by much.
For example, suppose you open "/Applications" > "Utilities" > "Terminal.app" and run this command:<pre>plutil -convert xml1 ~/Library/Preferences/loginwindow.plist -o ~/Desktop/loginwindowBackup.plist</pre>A plain text XML version of the file should be created on your "Desktop" (the command assumes that a file named "loginwindowBackup.plist" did not already exist there - if it did, it would have been overwritten so be careful). It should be possible to open that file in a text editor, such as eg. "TextEdit.app".
The "login items" are specified in the 'AutoLaunchedApplicationDictionary', which is bounded by the '<array></array>' tags. Within this array, each individual "login item" is specified within a "dictionary" entry (bounded by '<dict></dict>' tags), containing keys such as 'AliasData', 'Path', etc. Anyway, that whole dictionary entry (including the opening and closing 'dict' tags represents the "login item".
So it should be possible to copy and paste one or more entries from the backup into a second copy of the "loginwindow.plist" file. After editing, that file (renamed "loginwindow.plist") could be copied back into "~/Library/Preferences", prior to logging out and back in to test the login item.
It's probably easier than I have made it sound - easier on a technical level, at least, but still tedious to execute in practice...

Can't connect to HTTPS connections in all browsers suddenly

Here's the issue, I suddenly noticed I cant connect in an HTTPS connection, they all have a line thru them, so while I am logged in here, the https has a red line through it. The only thing I've installed is Calibre and some plugins to go with my Kindle DX. What are my option to fix?

can't not connect to https connections in all browsers suddenly..
me too..
Surprise surprise.

Client machine can't make HTTPS connections

Have you tried connecting via telnet from the VM to portal.office.com (or wherever)? The telnet client will need to be installed on Server 2008+I have had network issues with HyperV hosts & VMs, caused by the host being connected to iSCSI targets for backup jobs before, as well as issues with NFS.Along with those problems it would disallow me from removing the virtual switch (in order to recreate it), even with all the VMs shutdown, and after a restart.1st step: Update the drivers & firmware for the adapter(s), along with the the system BIOS / UEFI firmware, and chipset drivers for the host.2nd step: Try removing, and recreating all virtual switches, enable SR-IOV for the BIOS / UEFI, all adapters, and all VMs.3rd step: Try reseting everything via netshell:netsh firewall reset allnetsh interface ip reset allnetsh winsock reset all...

So the machine is a Hyper V VM of Windows 2012 running SharePoint 2013.I don't know when it started but the machine seems unable to make and keep HTTPS connections.I'm not talking about services trying to use this server via HTTPS.. I'm saying like I can't go to https://portal.office.com . it doesn't work with IE 10 and it dons't work with Chrome either. To try to get any data on this at all, I installed Fiddler and I see this message[Fiddler] The connection to 'manage.windowsazure.com' failed.
Error: TimedOut (0x274c).
System.Net.Sockets.SocketException A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 70.37.162.148:443 I installed a new synthetic virtual network adapter, thinking maybe something...
This topic first appeared in the Spiceworks Community

Can anyone help me answer whether Robohelp has a secure ftp (sftp) or secure http connection protocols? it only lists ftp or http, but not specifying if secure? Thanks.

Can anyone help me answer whether Robohelp has a secure ftp (sftp) or secure http connection protocols? it only lists ftp or http, but not specifying if secure? Thanks.

Hello again
First off, sorry for confusing anyone with the WYSIWYG reference. Failed attempt at humor. Ah, live and learn.
Can you expound on what you mean when you say: But there does seem to be “disagreement” regarding whether RH supports HTTPS?
If you are only referring to this thread, are you sensing "disagreement" because Willam said you can serve content to users?
Here's the deal. I sort of "read between the lines" with your post and made an assumption and it seems I may have needed to ask you to clarify before tossing an answer out. The assumption I made was based on your statement of: it only lists ftp or http
That made me believe you were referring to the Publish section in the Single Source Layout properties. (shown below)
This dialog allows you to specify a protocol used to UPLOAD your generated content to a server.
What Willam was referring to was the END USERS viewing the content AFTER it has been uploaded.
Cheers... Rick

TS2776 I can synch items entered into MS calendars to my iPad... this is done automatically when I connect to the USB. How do I synch items initially entered into my iPad to MS Calendars when the unit is connected to the USB port???

Cannot tell is the initial question was sent so here goes again. I can synch items entered into MS Calendars with my iPad... this is done automatically when I connect the iPad to the USB port. Can I synch items entered into the iPad calendar to the MS Calendar when the iPad is connected to the USB port??? if so how???

I have found an alternative and much quicker way to transfer photos to my ipad. Having exhausted the Apple route with its connection kit, I stumbled upon a YouTube video showing how you could use an external sd card reader / USB to transfer pictures. I did a quick search on eBay and found a device that would work with the ios7 update. Hey presto it works! (I purchased an sd card and a sd card adapter for my Canon 350d) plus the little sd card reader from eBay ( for quarter of the price ) of Apples connection kit ( which didn't work)
Come on Apple why can suppliers in the Market place produce accessories that work better than your own kit? You are missing an opportunity and frustrating customers no doubt. Could do better !

Can't open HTTP connection to a proxied server

Greetings,
Trying to open an HTTP connection to a web server. The connection is rejected
by the proxy. In order to bypass the proxy, I used to code something like:
System.setProperty("http.proxyHost", hostname) ;
System.setProperty(“http.proxyPort”, port);
Doing that, works properly in a standalone Java application. As soon as the same
code is implemented in a WebLogic 8.1 deployed EJB, it fails with the following
stack dump:
<May 10, 2004 7:12:07 PM CEST> <Info> <net> <000903> <Could not open connection
with host: www.rect.cofacescrl.com and port: 80.>
04-05-10 19:12:07,788 FATAL SearchCompanyBean - Error while attempting to connect
to Source
java.net.ConnectException: Tried all: '1' addresses, but could not connect over
HTTP to server: 'www.rect.cofacescrl.com', port: '80'
at weblogic.net.http.HttpClient.openServer(HttpClient.java:255)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:307)
at weblogic.net.http.HttpClient.<init>(HttpClient.java:126)
at weblogic.net.http.HttpClient.New(HttpClient.java:192)
at weblogic.net.http.HttpURLConnection.connect(HttpURLConnection.java:115)
at com.coface.STR.scrl.ScrlSearchAdapter.search(Unknown Source)
at com.coface.STR.tuxedo.SearchCompanyBean.service(Unknown Source)
at com.coface.STR.tuxedo.SearchCompanyBean_fbx9fb_EOImpl.service(SearchCompanyBean_fbx9fb_EOImpl.java:46)
at com.coface.STR.tuxedo.SearchCompanyBean_fbx9fb_EOImpl_WLSkel.invoke(Unknown
Source)
at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:159)
at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:263)
at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:230)
at com.coface.STR.tuxedo.SearchCompanyBean_fbx9fb_EOImpl_WLStub.service(Unknown
Source)
at weblogic.wtc.gwt.InboundEJBRequest.execute(InboundEJBRequest.java:419)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:234)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:210
Suggestions anybody before my boss gets nervous about that ?
Many thanks in advance,
Alexandre CUENCA

I think the data you are seeing is part of the telnet negotiation sequence. http://www.faqs.org/rfcs/rfc854.html
A telnet session is more complex than opening a TCP socket.
I would suggest using the LabVIEW Internet Toolkit for telnet communications.
Now is the right time to use %^<%Y-%m-%dT%H:%M:%S%3uZ>T
If you don't hate time zones, you're not a real programmer.
"You are what you don't automate"
Inplaceness is synonymous with insidiousness

Can untrusted app open http connections?

Hello,
JWS has various services to do things that are normally not allowed by untrusted applicatons - such as FileOpenService, FileSaveService, etc... Is there any way or any service to allow an untrusted application to open an http connection to a server other than the one from which it was downloaded???
Thank you,
Elana

No, there is no such service defined in the jnlp spec, but it sounds like it might be a usefull one for
them to consider for rev 2 of the spec.

Http Connection Problem on 7650 Emulator

HI!
I'm trying to establish a http connection with my tomcat server. My code is as following:
private void callServlet() throws IOException
HttpConnection http = null;
InputStream iStrm = null;
// Data is passed at the end of url for GET
/* String url = "http://localhost:8080/webserv" + "?" +
"account=" + tfAcct.getString() + "&" +
"password=" + tfPwd.getString();*/
try
http = (HttpConnection) Connector.open("http://heavenfighter.homeftp.org:8080/webserv?account=marco&password=test");
     catch(IOException e)
          fmMain.append("Verbindung fehlgeschlagen");
     System.out.println(e.toString());
     try
// Client Request
// 1) Send request method
http.setRequestMethod(HttpConnection.GET);
// 2) Send header information - none
// 3) Send body/data - data is at the end of URL
// Server Response
fmMain.append("Antwort" + http.getResponseCode());
if (http.getResponseCode() == HttpConnection.HTTP_OK)
iStrm = http.openInputStream();
// 2) Get header information - none
// 3) Get body (data)
int length = (int) http.getLength();
if (length > 0)
byte servletData[] = new byte[length];
iStrm.read(servletData);
// Update the string item on the display
fmMain.append("You passed to the servlet: \n" + new String(servletData));
else
fmMain.append("Unable to read data");
catch (Exception e)
fmMain.append("Network error2");
System.out.println(e.toString());
finally
// Clean up
if (iStrm != null)
iStrm.close();
if (http != null)
http.close();
After a few seconds, i get the network2 error and a message
java.io.IOException: Status = -20015
What does it means?
How can i connect to a http server???
Thanks

Sorry, I didn't realize you where talking about an emulator. My advice is relevant only on a real phone.
Anyway, here's some reading material that could help you:
Related posts on Nokia's forum (you might have to register before you can enter):
http://nkn.forum.nokia.com/forum/search.php?s=&action=showresults&searchid=452072&sortby=&sortorder=
Symbian error codes (and unfortunately -20015 doesn't appear):
http://www.symbian.com/developer/techlib/papers/errores/Erresapi.html
shmoove

Making https: connection from java code loaded into Oracle 8i database

A bit of a blast from the past, really, as 8i provides a JVM at 1.2.2.
I need to provide an PL/SQL function which accesses a RESTful web service requiring https connection. Got the call working under 1.2 locally without much trouble using:
static {
        System.setProperty("java.protocol.handler.pkgs",
                "com.sun.net.ssl.internal.www.protocol");
        Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
    }The trick is to get the Oracle database to run the code internally. What libraries do I need where? I get an extremely unhelpful NoClassDefFoundError, without mention of the offending class.
By doing loadjava with jcert.jar,. jnet.jar and jsse.jar (the libraries I'm using with the test program) I can get loadjava to accept and allegedly resolve the class.

endasil wrote:
malcolmmc wrote:
Well, sadly look at the colour scheme.Yeah, sarcastic was I. The NoClassDef error seriously doesn't give a class name? I find it astonishing that any implementation would be that stupid.Seriously. The strange thing is that before I got to the NoClassDefFound I had a Initialization error (until I added a security rule for setting the Provider) and for that I got a full stack trace (in an obscure trace file, granted).

Https Connection from servlets using JSSE.

Hi all,
Although my question is the same as the QOW for this week, there is an error "unsupported keyword EMAIL" returned when i try to establish a https connection using servlet. The error log is as follow:
=====================================
java.io.IOException: unsupported keyword EMAIL
at com.sun.net.ssl.internal.ssl.AVA.<init>([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.ssl.RDN.<init>([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.ssl.X500Name.a([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.ssl.X500Name.<init>([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnection.connect([DashoPro-V1.2-120198])
at com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnection.getInputStream([DashoPro-V1.2-120198])
at URLReader.doGet(URLReader.java:78)
===================================
Does anyone know the meaning of this error?
I try to write a java application using the similar code and it totally works fine(i can connect to the server and obtain the page). Does JSSE support Java Servlet? Or this is the problem of tomcat server? FYI, I'm using
Tomcat 3.2.2
Java SDK 1.3
Many thanks!
Ethan
p.s. Here is the source for my program
import java.io.*;
import java.net.*;
import javax.servlet.*;
import javax.servlet.http.*;
import javax.net.*;
import javax.net.ssl.*;
import com.sun.net.ssl.*;
public class URLReader extends HttpServlet{
private PrintWriter out = null;
public void doGet(HttpServletRequest req, HttpServletResponse res){
res.setContentType("text/html");
res.setHeader("Cache-Control", "no-cache");
res.setHeader("Progma", "no-cache");
out = res.getWriter();
java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
System.setProperty("javax.net.ssl.trustStore", "File_for_keyStore");
System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
try {
     URL url = new URL("https://server_name:port/index.htm");
     HttpsURLConnection urlconnection = (HttpsURLConnection)url.openConnection();
     BufferedReader in = new BufferedReader(new InputStreamReader(urlconnection.getInputStream()));
     String outputLine ;
     while ( (outputLine = in.readLine()) != null){
     out.println("There is the result: "+outputLine);
     in.close();
catch(Exception e){
public void doPost(HttpServletRequest req, HttpServletResponse res){
}

I was just having this issue, after months of error-free ssl behavior, on a new machine i was installing (Note: that I was running the IBM jdk1.3) It turns out that when I was editing the java.security file to know about JCE/JSSE providers i had the providers in the wrong order. The Error causing sequence was:
security.provider.1=com.sun.net.ssl.internal.ssl.Provider
security.provider.2=com.ibm.crypto.provider.IBMJCA
# Extra provider added ibm@33894
security.provider.3=com.ibm.crypto.provider.IBMJCE
# extra provider i added
security.provider.4=sun.security.provider.Sun
The issue disappeared when i changed the order to:
security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
security.provider.3=com.ibm.crypto.provider.IBMJCA
# Extra provider added ibm@33894
security.provider.4=com.ibm.crypto.provider.IBMJCE
hope that helps!
--john molnar
Trellis Network Security

HTTPS connection from servlet to another webserver

Hi,
We want to make a https connection from a servlet in weblogic server to another
web server (not necessarily weblogic). We also need dual authentication. But whenever
we use URL.openConnection(), it always returns us weblogic's internal https and
SSL implementation. Since weblogic has no documentation about how to use these
internal classes, such as how to set trusted server certificate, and how to set
client certificate (servlet is a client of another web server). We want to use
jsse, after setting JSSE required system properties, I still get a weblogic's
httpsURLConnection. Can any of you tell me how to resolve this issue?
Thanks.
Xinshi

Yeah, I'm using JSSE now. Here is what I did:
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provide());
Provider prov = new SimpleSecureProvider();
prov.setProperty("SecureRandom.efficient", "test.EfficientSecureRandom");
Security.insertProviderAt(prov, 1);
You don't really need the provider stuff to get the example working. I use it
to get around a quick in JSSE where the random number generator takes 15-30 seconds
to generate a random sequence at start up.
SimpleSecureProvider looks like this:
public class SimpleSecureProvider extends Provider
public SimpleSecureProvider()
super("SimpleSecureProvider-", 1.0, "Hack to enable more efficient random
seed generator");
test.EfficientSecureRandom is bascially an exact copy of Sun's SecureRandom.java
with the only difference that I used my own random number generator.
Anyway, rest of the code you need looks like this:
URL url= new URL("htps://someplace.com");
URLConnection sconnection = url.openConnection();
Do whatever.
I also stored jcert.jar, jnet.jar, jsse.jar in /usr/java/jdk1.3/lib/ext
I think that is everything.
I just noticed that service pack 9 has a security example that does not require
all these jsse hacks. I'm trying to get it to work, but not having much luck.
Anybody got this working right?
"Jayesh Patel" <[email protected]> wrote:
See if this works,
1. Add the 'j2ee.jar' to CALSSPATH in weblogic startup script.
2. Set the property SSLHandlerEnabled flase in config.xml
3. Add the following property permission to the
weblogic.policy' file under a 'grant' directive
for all codebases (bottom): 'permission java.security.AllPermission'
4. Use the following bit of source code to create an https connection:
import com.sun.net.ssl.*; ....
com.sun.net.ssl.HttpsURLConnection connection;
System.setProperty ("java.protocol.handler.pkgs",
"com.sun.net.ssl.internal.www.protocol");
java.security.Security.addProvider(new
com.sun.net.ssl.internal.ssl.Provider() );
URL url = new URL( "https", hostname, query );
-Jayesh
connection = (com.sun.net.ssl.HttpsURLConnection )url.openConnection(
"Xinshi Sha" <[email protected]> wrote in message
news:[email protected]...
Hi,
We want to make a https connection from a servlet in weblogic serverto
another
web server (not necessarily weblogic). We also need dual authentication.But whenever
we use URL.openConnection(), it always returns us weblogic's internalhttps and
SSL implementation. Since weblogic has no documentation about how
to
use
these
internal classes, such as how to set trusted server certificate, andhow
to set
client certificate (servlet is a client of another web server). Wewant to
use
jsse, after setting JSSE required system properties, I still get aweblogic's
httpsURLConnection. Can any of you tell me how to resolve this issue?
Thanks.
Xinshi

Connection refused when trying to getOutputStream from https connection

Hi all !
I want to make an https connection with a server to send/get the request/response
What can be the cause of the following error in the following code testHttps.java?
java.net.ConnectException: Connection refused: connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(Unknown Source)
at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.connect(Unknown Source)
at sun.net.NetworkClient.doConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.New(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(Unknown Source)
at Test.testHttps.main(testHttps.java:46)
Exception in thread "main" java.net.ConnectException: Connection refused: connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(Unknown Source)
at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.connect(Unknown Source)
at sun.net.NetworkClient.doConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.New(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
at Test.testHttps.main(testHttps.java:51)
testHttps.java
package Test;
import java.io.;
import java.net.;
import javax.net.ssl.*;
public class testHttps {
public static void main(String args[]) throws Exception {
//System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
// Create a trust manager that does not validate certificate chains
TrustManager[] trustAllCerts = new TrustManager[]{
new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
public void checkClientTrusted(
java.security.cert.X509Certificate[] certs, String authType) {
public void checkServerTrusted(
java.security.cert.X509Certificate[] certs, String authType) {
// Install the all-trusting trust manager
try {
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
} catch (Exception e) {
System.out.println("Error" e);
// Now you can access an https URL without having the certificate in the truststore
try {
URL url = new URL("https://..............");-->//address of the server given here
URLConnection conn = url.openConnection();
HttpsURLConnection urlConn = (HttpsURLConnection) conn;
urlConn.setDoOutput(true);
OutputStreamWriter wr = null;
try{
wr = new OutputStreamWriter(conn.getOutputStream());
catch(Exception e){
e.printStackTrace();
BufferedReader in = new BufferedReader(new InputStreamReader(urlConn.getInputStream()));
String str;
while( (str=in.readLine()) != null) {
System.out.println(str);
} catch (MalformedURLException e) {
System.out.println("Error in SLL Connetion" +e);
HostnameVerifier hv = new HostnameVerifier()
public boolean verify(String urlHostName, SSLSession session)
System.out.println("Warning: URL Host: " urlHostName " vs. "
session.getPeerHost());
return true;
want to ignore certificate validation.
plese help me..
hi brucechapman, as you suggested me, i posted in Core API- networking forum, now please gimme a solution
Thanks in advance.

hi brucechapman,
ran the NetTest program, got the following exception:
trigger seeding of SecureRandom
done seeding SecureRandom
Exception in thread "main" java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(Unknown Source)
     at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
     at java.net.PlainSocketImpl.connect(Unknown Source)
     at java.net.SocksSocketImpl.connect(Unknown Source)
     at java.net.Socket.connect(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)
     at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.connect(Unknown Source)
     at sun.net.NetworkClient.doConnect(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.http.HttpClient.openServer(Unknown Source)
     at sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source)
     at sun.net.www.protocol.https.HttpsClient.New(Unknown Source)
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
     at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
     at java.net.URL.openStream(Unknown Source)
     at Test.NetTest.main(NetTest.java:40)
NetTest.java:40 -- InputStream is = url.openStream(); at this ling throwing exception.
For the following program, i have added the argument -Djavax.net.ssl.trustStore=cacerts
i have exported the certificate from IE and added to the keystore.
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.security.Security;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
public class Communicator {
public static void main(String[] args) {
try {
int port = 34443;
     String strReq = "xml content ";
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
SSLSocketFactory factory = (SSLSocketFactory) SSLSocketFactory.getDefault();
SSLSocket socket = (SSLSocket) factory.createSocket("jyoti-win2k8-32", port);
//Writer out = new OutputStreamWriter(socket.getOutputStream());
//out.write("GET http://" + "hostname" + "/ HTTP 1.1\r\n");
// out.write("\r\n");
//out.write(strReq);
//out.flush();
OutputStreamWriter wr = null;
try{
     wr = new OutputStreamWriter(socket.getOutputStream());
     catch(Exception e){
          e.printStackTrace();
     System.out.println("got output stream");
     try{
     wr.write(strReq);
     //System.out.println("response code : "+conn.getResponseCode());
     System.out.println("written");
     wr.flush();
     catch(IOException e){
          e.printStackTrace();
InputStreamReader is = new InputStreamReader(socket.getInputStream(),"UTF8") ;
     BufferedReader rd = new BufferedReader(is);
     String line;int count=0;
     System.out.println("rd "+rd);
     while ((line = rd.readLine()) != null) {
          System.out.println("line "+line );
          System.out.println(count++);
          // Process line...
     System.out.println(count);
rd.close();
BufferedReader in = new BufferedReader(new InputStreamReader(socket.getInputStream()));
int c;
while ((c = in.read()) != -1) {
System.out.write(c);
//out.close();
in.close();
socket.close();
} catch(IOException ex) {
ex.printStackTrace();
Exception :
javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
     at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(Unknown Source)
     at com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown Source)
     at sun.nio.cs.StreamEncoder.writeBytes(Unknown Source)
     at sun.nio.cs.StreamEncoder.implFlushBuffer(Unknown Source)
     at sun.nio.cs.StreamEncoder.implFlush(Unknown Source)
     at sun.nio.cs.StreamEncoder.flush(Unknown Source)
     at java.io.OutputStreamWriter.flush(Unknown Source)
     at Test.Communicator.main(Communicator.java:55)
Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
     at sun.security.validator.PKIXValidator.<init>(Unknown Source)
     at sun.security.validator.Validator.getInstance(Unknown Source)
     at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.getValidator(Unknown Source)
     at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
     at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
     at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)
     at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
     at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
     at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(Unknown Source)
     ... 7 more
Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
     at java.security.cert.PKIXParameters.setTrustAnchors(Unknown Source)
     at java.security.cert.PKIXParameters.<init>(Unknown Source)
     at java.security.cert.PKIXBuilderParameters.<init>(Unknown Source)
     ... 19 more
java.net.SocketException: Socket is closed
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.getInputStream(Unknown Source)
     at Test.Communicator.main(Communicator.java:66)
please help me and provide me suggestion/solution. how to get rid off this trustanchor paramater exception
what is it actualy?
Thanks in advance.

Setting up a https connection between SAP CRM and genesys gplus adapter

Hello All-
We are integrating SAP CRM with genesys mysap gplus adapter. We are struck in setting up a https connection between sap and gplus adapter.
Can anyone here help me out in this like how to get the SSL Protocol, keystore, keystore password,truststore and truststore password.
Information abt Adapters server certificate. Do we need to configure the adapter for the proxy also?
Any additional comment will help. Thanks in advance!

Hello Vinod,
Please refer the following OSS notes 564085.
Please reward if helpful.
regards,
Muralidhar Prasad.C

Opening an https connection from within a Servlet.

I am having problems trying to establish an HTTPS connection to a servlet from within a different servlet.
I get the java.net.MalformedURLException: unknown protocol: https. SSL is setup for the web server. Direct connections from the browser to a servlet work fine with SSL, but a connection from one servlet to another servlet fails. I'm stumped. Is there a separate SSL install/configuration required for the servlet engine? Could anyone explain?

When you set up SSL enabled web server, you should be getting a trust cert file that knows the hand shake protocol to talk to that server. Once you have that file, you can load that file from that servlet using System.load and then you would be able to talk to anything that runs on that SSL enabled Web server.
Also you must have JSSE jar files installed in your system .
Check out this url:
http://java.sun.com/products/jsse/INSTALL.html
Let me know if you still have problems

Can unencrypted items in a https connection be hidden?

Similar Messages

Maybe you are looking for