Customized SSLSocketFactory dynamically loading TrustManager instance with updated truststore

Question

When I am making LDAPS connection, I would like the LDAPS client be authenticated with latest updated CA certificate in the truststore.
Here is what I am trying to do:
// Set up the environment for creating the initial context
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,
  "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://localhost:389/o=JNDITutorial");
// Specify the socket factory
env.put("java.naming.ldap.factory.socket", "MySSLSocketFactory");
// Create the initial context
DirContext ctx = new InitialDirContext(env);
Defining the MySSLSocketFactory class here:
import com.vormetric.server.ServiceLocator;
import com.vormetric.server.sdk.config.IConfigUtil;
import com.vormetric.server.sdk.config.LdapException;
import org.apache.log4j.Logger;
import javax.net.SocketFactory;
import javax.net.ssl.*;
import java.io.File;
import java.io.IOException;
import java.lang.reflect.Constructor;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.net.*;
public class MySSLSocketFactory extends SSLSocketFactory {
   private static Logger logger = Logger.getLogger(MySSLSocketFactory.class);
   public static final String TRUST_STORE_FILE = "server.truststore";
   private static MySSLSocketFactory factory;
   private SSLSocketFactory sslsocket = null;
   private SSLContext sslContext;
   static private String ldapHost;
   private static String domainName;
   private String trustStore;
   //private ExtendedSSLSession sess;
   public MySSLSocketFactory() {
   try {
  IConfigUtil svrCfg = ServiceLocator.getConfigUtilInstance();
   trustStore = svrCfg.getCGSSConfDir() + TRUST_STORE_FILE;
  File file = new File(trustStore);
   if (!file.exists()) {
   throw new LdapException(
   "Trust store non-exists! Configure ldaps settings first.");
   sslContext = getSSLContext(trustStore, domainName);
   //sslContext.setSocketFactory(SSLSocketFactoryImpl.getDefault());
   sslsocket = sslContext.getSocketFactory();
  } catch ( Exception ex ){ throw new IllegalArgumentException(ex); }
   @Override public String[] getDefaultCipherSuites() { return sslsocket.getDefaultCipherSuites(); }
   @Override public String[] getSupportedCipherSuites() { return sslsocket.getSupportedCipherSuites(); }
   public static synchronized SocketFactory getDefault() {
   if(factory == null){
   factory = new MySSLSocketFactory();
   return factory;
   @Override
   public Socket createSocket(Socket socket, String host, int port, boolean bln) throws
   IOException {
   return sslsocket.createSocket(socket, host, port, bln);
   @Override
   public Socket createSocket(String host, int port) throws IOException, UnknownHostException {
   return sslsocket.createSocket(host,port);
   @Override
   public Socket createSocket(String host, int port, InetAddress localHost, int localPort)
   throws IOException, UnknownHostException {
   return sslsocket.createSocket(host, port, localHost, localPort);
   @Override
   public Socket createSocket(InetAddress host, int port) throws IOException {
   return sslsocket.createSocket(host,port);
   @Override
   public Socket createSocket(InetAddress host, int port, InetAddress localAddress, int localPort)
   throws IOException {
   return sslsocket.createSocket(host, port, localAddress, localPort);
   public SSLContext getSSLContext(String trustStore, String domainName)
   throws Exception {
  TrustManager[] trustManagers = new TrustManager[] { new ReloadableX509TrustManager(this.trustStore, this.domainName)
   //SSLContext sslContext = new SSLContextImpl.TLS12Context();
   SSLContext sslContext = SSLContext.getInstance("TLSv1.2", "SunJSSE");
  sslContext.init(null, trustManagers, null);
   return sslContext;
   public static void setDomainName(String name) {
   domainName = name;
   public static String getSsContext() {
   return domainName;
But here is the problem whenever trying to make LDAPS connection, I am getting the following exceptions with JDK1.7.0_72:
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1) Caused by: java.net.SocketException: Unconnected sockets not implemented
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at javax.net.SocketFactory.createSocket(SocketFactory.java:125)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at java.lang.reflect.Method.invoke(Method.java:606)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at com.sun.jndi.ldap.Connection.createSocket(Connection.java:307)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at com.sun.jndi.ldap.Connection.<init>(Connection.java:203)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   ... 59 more
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1) Caused by: java.lang.UnsupportedOperationException
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at javax.net.SocketFactory.createSocket(SocketFactory.java:123)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   ... 65 more
Please let me know what I should do to get over this exception.
Thanks a lot.
yilicaus

Answer 1

When I am making LDAPS connection, I would like the LDAPS client be authenticated with latest updated CA certificate in the truststore.
Here is what I am trying to do:
// Set up the environment for creating the initial context
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,
  "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://localhost:389/o=JNDITutorial");
// Specify the socket factory
env.put("java.naming.ldap.factory.socket", "MySSLSocketFactory");
// Create the initial context
DirContext ctx = new InitialDirContext(env);
Defining the MySSLSocketFactory class here:
import com.vormetric.server.ServiceLocator;
import com.vormetric.server.sdk.config.IConfigUtil;
import com.vormetric.server.sdk.config.LdapException;
import org.apache.log4j.Logger;
import javax.net.SocketFactory;
import javax.net.ssl.*;
import java.io.File;
import java.io.IOException;
import java.lang.reflect.Constructor;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.net.*;
public class MySSLSocketFactory extends SSLSocketFactory {
   private static Logger logger = Logger.getLogger(MySSLSocketFactory.class);
   public static final String TRUST_STORE_FILE = "server.truststore";
   private static MySSLSocketFactory factory;
   private SSLSocketFactory sslsocket = null;
   private SSLContext sslContext;
   static private String ldapHost;
   private static String domainName;
   private String trustStore;
   //private ExtendedSSLSession sess;
   public MySSLSocketFactory() {
   try {
  IConfigUtil svrCfg = ServiceLocator.getConfigUtilInstance();
   trustStore = svrCfg.getCGSSConfDir() + TRUST_STORE_FILE;
  File file = new File(trustStore);
   if (!file.exists()) {
   throw new LdapException(
   "Trust store non-exists! Configure ldaps settings first.");
   sslContext = getSSLContext(trustStore, domainName);
   //sslContext.setSocketFactory(SSLSocketFactoryImpl.getDefault());
   sslsocket = sslContext.getSocketFactory();
  } catch ( Exception ex ){ throw new IllegalArgumentException(ex); }
   @Override public String[] getDefaultCipherSuites() { return sslsocket.getDefaultCipherSuites(); }
   @Override public String[] getSupportedCipherSuites() { return sslsocket.getSupportedCipherSuites(); }
   public static synchronized SocketFactory getDefault() {
   if(factory == null){
   factory = new MySSLSocketFactory();
   return factory;
   @Override
   public Socket createSocket(Socket socket, String host, int port, boolean bln) throws
   IOException {
   return sslsocket.createSocket(socket, host, port, bln);
   @Override
   public Socket createSocket(String host, int port) throws IOException, UnknownHostException {
   return sslsocket.createSocket(host,port);
   @Override
   public Socket createSocket(String host, int port, InetAddress localHost, int localPort)
   throws IOException, UnknownHostException {
   return sslsocket.createSocket(host, port, localHost, localPort);
   @Override
   public Socket createSocket(InetAddress host, int port) throws IOException {
   return sslsocket.createSocket(host,port);
   @Override
   public Socket createSocket(InetAddress host, int port, InetAddress localAddress, int localPort)
   throws IOException {
   return sslsocket.createSocket(host, port, localAddress, localPort);
   public SSLContext getSSLContext(String trustStore, String domainName)
   throws Exception {
  TrustManager[] trustManagers = new TrustManager[] { new ReloadableX509TrustManager(this.trustStore, this.domainName)
   //SSLContext sslContext = new SSLContextImpl.TLS12Context();
   SSLContext sslContext = SSLContext.getInstance("TLSv1.2", "SunJSSE");
  sslContext.init(null, trustManagers, null);
   return sslContext;
   public static void setDomainName(String name) {
   domainName = name;
   public static String getSsContext() {
   return domainName;
But here is the problem whenever trying to make LDAPS connection, I am getting the following exceptions with JDK1.7.0_72:
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1) Caused by: java.net.SocketException: Unconnected sockets not implemented
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at javax.net.SocketFactory.createSocket(SocketFactory.java:125)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
2015-03-02 13:23:37,563 ERROR [stderr] (http-/0.0.0.0:8445-1)   at java.lang.reflect.Method.invoke(Method.java:606)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at com.sun.jndi.ldap.Connection.createSocket(Connection.java:307)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at com.sun.jndi.ldap.Connection.<init>(Connection.java:203)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   ... 59 more
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1) Caused by: java.lang.UnsupportedOperationException
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   at javax.net.SocketFactory.createSocket(SocketFactory.java:123)
2015-03-02 13:23:37,564 ERROR [stderr] (http-/0.0.0.0:8445-1)   ... 65 more
Please let me know what I should do to get over this exception.
Thanks a lot.
yilicaus