How to disable hostname checking in SSL client?

I have a java client using Sun's JDK 1.6. It makes a SSL connection to a server which provides a certificate that does not match the hostname of the server. The result is:
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching myserver found
        at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1611)
        at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
        at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1035)
        at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:124)
        at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
        at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1139)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:418)My question is how can hostname checking be disabled? I don't have the option of modifying the client source code. I am hoping a system property exists for this.

javax.net.ssl.HostnameVerifier is the only mechanism.

Similar Messages

How to Disable caching of all SSL pages?

May anyone can help me, how to Disable caching of all SSL pages in an web application?
Thanks in advance.
Balamurugan.K

sabre150 wrote:
kajbj wrote:
It doesn't matter that you are using SSL if I understood your question correctly. I'm not certain but I think it does matter. As I understand it, no SSL/HTTPS pages should be cached since this could represent a security weakness. I was a bit vague. I meant that it doesn't matter what he is using under the hood since he isn't doing any "programming" if he's only serving pages. Everything should be related to configuring the server correctly, and/or using the correct header directives (not sure since I'm not a web developer)

Does Anyone Knows How To Disable The "Check For Updates" Option in Adobe Edge Code and Reflow?

Does Anyone Knows How To Disable The "Check For Updates" Option in Adobe Edge Code and Reflow?
Thanks in Advance

I don't think there is a way for Edge Code. I'm not sure about Reflow.
Why don't you just upgrade? That will stop the notifications.
Randy

SaaS Sharepoint, ADFS claims and internal AD-CA: How to disable CRL check in Sharepoint?

Hi all,
We have an external SaaS provider with a Sharepoint 2010 server. In our AD, there is an ADFS server providing ADFS claims to Sharepoint and thus giving SSO functionality. For the ADFS service and its token-signing and encrypting, there is one certificate
drawn from an internal AD Enterprise CA server.
The problem is that, when the company user opens the Sharepoint URL, it is extreamly slow to open, however it does eventualy open. The SaaS provider has indicated its an issue with the CRL checking. I know on other Microsoft products there are ways to disable
CRL checking but haven't found such information for sharepoint.
We have provided the CRL files and the provider has added these and for as long as they are valid things work as expected. However the CRL then expires and we are back to square one.
Can anyone help?
I have found this question has been asked before here:
https://social.technet.microsoft.com/Forums/sharepoint/en-US/431bae5c-c502-4723-9de7-663abd46658e/saas-sharepoint-adfs-claims-and-internal-adca-how-to-disable-crl-check-in-sharepoint?forum=sharepointgeneralprevious
Unfortunately the answer doesn't satisfy my situation. Also not sure I agree that self signed certificates should be used and it's quite a topic for debate in ADFS circles... However in my situation we don't have the option to change ADFS to use self signed
certificates as the ADFS service is in use with 12+ other service providers all who have no issue using the Token Signing Certificate even though they cant access the CRL either.
Thanks for your help,
James

Hi,
As I understand, you want to disable CRL check in SharePoint.
There are four workarounds:
1. Give your servers an outbound Internet connection
2. Edit the hosts file at “%SYSTEMROOT%\\System32\\drivers\\etc\\hosts” to fool the CRL check into thinking your local machine is crl.microsoft.com by pointing it at 127.0.0.1 (localhost).
3. Edit the registry to disable CRL checking by setting the State DWORD to 146944 decimal (SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WinTrust\\Trust Providers\\Software Publishing for both HKEY_USERS\\.DEFAULT and HKEY_CURRENT_USER) PowerShell.
4. Edit the machine.configs and disable it there.
The article gives you the details about the four workaround.
More reference:
http://basementjack.com/uncategorized/powershell-script-to-disable-certificate-revocation-list-crl/
https://kb4sp.wordpress.com/2013/10/08/certificate-revocation-list-disable-check/
Best regards,
Sara Fan

How to disable hostname verification on iplanet reverse proxy

I am looking for a way to disable hostname verification of the application server url specified in teh reverse proxy setup.
I am using the following setting in my Object definitions. It is failing due to the certificate CN is not matching the url I specified
The error is :
for host xx.yy.zz.ww trying to GET /uri/loginAction.do, service-http reports: HTTP7758: error sending request (SSL_ERROR_BAD_CERT_DOMAIN: Requested domain name does not match the server's certificate.)
Route fn="set-origin-server" server="https://bbb.com:7002/" poll-timeout="20000" retries="2"
My tomcat certificate CN has aaa.com
While I am using the tomcat on bbb.com.
Is there any way to disable hostname verification on a reverproxy setup. I am unable to find any relevant documentation on this.
The closest discussion I found was https://forums.oracle.com/thread/1943116 but it did not conclude anything.

Found a solution from Oracle Knowledge base:
This fixed our issue
<Object name="reverse-proxy-/abc">
ObjectType fn="ssl-client-config" validate-server-cert="false"
Route fn="set-origin-server" server="https://server1.test.com:11011" server="https://server2.test.com:11011"
</Object>

How to disable one check box when another is checked

Hi, I'm a first time user.
i am trying to make text fields appar and dissapaer when check boxes are ticked. but only alow one check box to be active at one time.
I am making a simple form in Acrobat pro 9,
I have two check boxes Checkbox1 & Checkbox2.
I have two text fields Textfield1 & Textfield2
i have added actions to checkbox1 & checkbox2 to 'hide or show' the text fields.
Action --> on focus (checkbox1) show/hide field (textfield1) is hide
Action --> on focus (checkbox1) show/hide field (textfield2) is show
oposite
Action --> on focus (checkbox2) show/hide field (textfield2) is hide
Action --> on focus (checkbox2) show/hide field (textfield1) is show
problem 1 - how to disable checkbox1 when checkbox 2 is ticked.
or disable checkbox2 when checkbox1 is ticked.
my other problem is that this action has the same effect for ticking or unticking the checkbox.
thanks in advance to anyone who can help.
can you please write your answer in simple terms. Basically this is the first time i have used acrobat pro so please dont assume any knowledge at all. thansk very much .

First, I would experiment with just check boxes and learn their properties and how they can interact.
Have you tried using the same name for 2 check boxes and assign a different "export value" to each check box.
Have you looked at the values a check box or boxes have when checked or un-checked?
Have you looked at how the various actions for a field work?

How to disable hostname verification without code

Hello.
Is there a way to disable the hostname verification during SSL connection, ? I mean something like a system property, since i use an existing application and i've not the source to set my own custom hostname verifier.
Thanks.
Ephemeris Lappis

Hi
I faced the same problem and as I see now I'm not the only one :o)
Did you find the way to do it, please?
Very appreciating any inputs,
Sincerely,
Jabb
null

How to disable spell checker in editable forms?

Hello, everyone,
Asking for an advice.
I want to disable spell checking in an editable PDF form, since I don't have the dictionary of my language.
Spell checking in this case is bit annoying and slows down the editing.
I have the checker disabled in the preferences. However the checker still tries to do it's job.
How do I disable it?
Greetings,
Vytas

Thanks for checking it out.
If anybody has ideas about this, please share
Cheers,
Vytas

How to disable avalibility check

Hi,
I don't want to avalibility check only in sales order. How can I disable avalibility check for sales order ? How can I customize for this case?
Thank you,
Regards,
Hilal

hi,
u can do this by maintaining 'kp' in availability chek field in mrp3 view of material master. but make sure the same is active in delivery item category else the syatem will allow PGI even if there are no stocks.
saurabh

How to Disable SCCM Software Updates on Client Workstations

Hi,
I have enabled Software Updates for all clients, to create a baseline for reporting. The intent was to then disable Software Updates via. SCCM Client Settings, so that our clients could continue receiving updates from Microsoft until we were ready to deploy
updates to our clients.
After modifying the SCCM Client Settings, the Software Update Cycles/actions removed from the Configuration Manager Client on the workstations, however the local policy on the workstation remained configured (did not revert back to Non-Configured).
and the workstation is still looking to the SCCM for Windows Updates.
Using SCCM, how do I get the workstations back to Microsoft for Windows/Microsoft Updates?
TIA,
Bill

>I've read that you shouldn't mix SCCM and Group Policy for Windows Updates, when you're intending
to use SCCM.
Correct - if you are using Group Policy to manage the Windows Update settings, ConfigMgr will not be able to manage them. You're post implied you did not want to manage updates with ConfigMgr.
> not all of our workstations are on a domain; so that's not really a complete solution for
us.
ConfigMgr is designed to easily configure devices to update against ConfigMgr, not Microsoft Update, so there isn't just a check box for what you want.
Consider using ConfigMgr Compliance Settings to manage the registry keys for the Windows Update settings you are looking for on your devices.
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful".

How to Disable Syntax Checker for DDL Generation

Would like to include shell script commands before a create table statement. Modified the .xdb but PowerDesigner does not recognize this code as it is not native to the database. Is there a way to disable the syntax check so that the create table script can include these statements rather than a number of errors? Running v15.2 of PowerDesigner. Any feedback would be appreciated!

Hello. Yes. To be more specific, want to be able to run the create table DDL for Teradata from BTEQ. I added the following statements to a customized version of the Terada .xdb for the table BeforeCreate:
.logon ${TD_SERVER}/${TD_USERNAME},${TD_PASSWORD}
select 1
from dbc.tables
where DatabaseName = [%QUALIFIER%]
and TableName = '%TABLE%'
.if errorcode > 0 then .goto error
.if activitycount <> 1 then .goto create_tbl
drop table %TABLE%;
.if errorcode > 0 then .goto error
.label create_tbl
The DDL shows up with syntax errors as follows. So clearly, there is something that is attempting to validate the code:
3 error(s), 0 warning(s)
(1) (Table "DATE_DIM"):
   [syntax error] unknown macro: logon ${TD_SERVER}/${TD_USERNAME},${TD_PASSWORD}
(8) (Table "DATE_DIM"):
   [syntax error] condition parsing error
(16) (Table "DATE_DIM"):
   [syntax error] expecting .endif

How to disable spell checker?

Where do you disable the spell checker? Thanks.

Just look into the "Edit"-menu! (Edit -> Spelling)

How to disable Plugin Check from opening every time browser opens

Every time I open firefox, "plugin check" opens. Even after I installed and updated all plugins, the plugin-check appears whenever firefox opens. After updating all the plugins I restarted my pc, reset the browser and checked to make sure that my home page has not been changed the firefox plugin change, disabled all my plugins and even tried blocking the website via HOSTS.
I am fully capable of checking to see if my browser and plugins are up-to-date and I don't appreciate the unnecessary waste of time with this plugin-check running every single time the browser opens. Similar to updates, this should be an OPTIONAL check not FORCED and there should be a simple way to disable it without having the browser open an extra blank tab or requiring the user to edit the about:config to work around it.
Website: https://www.mozilla.com/en-US/plugincheck/

Hello defuz2013, go to [http://kb.mozillazine.org/About:config about:config] find '''plugins.update.url''' and change it the value to an empty string.
also change the '''plugins.hide_infobar_for_outdated_plugin''' to TRUE
then check firefox again
thank you

How to disable syntax checker that generates red underlines

I've searched and couldn't find anything. Is there any way to turn off or delay the red underlines that come up while typing in the sql worksheet in SQL developer? Just something that's been bothering me.

Try checking under Tools -> Prefs -> Code Editor -> PL/SQL Syntax Colors -> Available Styles: PLSQL Errors
I don't know if unchecking "Enable Highlight" will turn off the line or not...but changing the line color to Transparent or whatever you background color is should make it go away.
EDIT
Not PLSQL Errors...SQL&PLSQL Syntax Errors
Edited by: DylanB123 on Sep 21, 2010 12:20 PM

How to disable SSL Renegotiation

Hi All,
A security audit discovered one of our application's SSL termination, resides our ACE, supports SSL Renegotiation, which is, in their opinion, a security risk. As far I know, it is not supported to turn off this feature on ACE. Anyway, I want to be sure, before I reports this to the auditors. If you know, how to disable it, please share with me!
We are running 3.0(0)A4(2.2).
Regards,
Tamas

Thank you for your answer.
Our running version is A5(2.0). It should have rehandshake disabled by default.
Here are the outputs from some commands:
ACE# sh run | i rehand
Generating configuration....
ACE# sh parameter-map SSL_TERMINATION
Parameter-map : SSL_TERMINATION
Description : -
Type : ssl
    version                            : all
    close-protocol                     : none
    expired-crl                        : allow
    cdp-errors                         : reject
    authentication-failure any         : reject
    session-cache timeout              : disabled
    queue-delay timeout                : disabled
    Accepted cipher list:
      RSA_WITH_RC4_128_MD5 (priority:1)
      RSA_WITH_RC4_128_SHA (priority:1)
      RSA_WITH_AES_128_CBC_SHA (priority:10)
      RSA_WITH_AES_256_CBC_SHA (priority:1)
    rehandshake                        : disabled
    purpose-check                      : enabled
As you can see there is no configuration command to activate rehandshake.
So my question is if the rehandshake command only affects the ACE´s ability to do a rehandshake from its own side, but always lets the client do it if it wants to.
It isn't easy to find details about this. And the only place where I have found i little bit of details says "Enables rehandshake, allowing the ACE to send an SSL HelloRequest message to its peer to restart SSL handshake negotiation", so it might just be in that direction.
A followup question would be if it is possible to prevent the client from doing a rehandshake by a command in the ACE.
If this behaviour is not the intention this has to be a bug and I would go to the TAC with it.
I just want to know how the ACE is intended to work before I do that.
Best Regards,
/Torbjörn

How to disable hostname checking in SSL client?

Similar Messages

Maybe you are looking for