How to use JSSE HttpsURLConnection in WL 5.1

I am trying to POST, from a jsp within weblogic,
to an outside https URL. It appears to me that
weblogic.net.http.HttpsURLConnection cannot POST
to a connection.
I am now trying to use Sun's JSSE 1.0.3.
I've installed jcert.jar, jnet.jar and jsse.jar to
C:\usr\local\java\jdk1.3.1_04\jre\lib\ext
Here is the relevant code:
<%@ page import="java.io.*,java.net.*,java.util.*,java.lang.*,javax.servlet.*,java.security.*,com.sun.net.ssl.*"
%>
<%
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
System.setProperty("java.protocol.handler.pkgs", com.sun.net.ssl.internal.www.protocol");
url = new java.net.URL("https://www.some-secure-site.com"); // This is where
the ClassCastException occurs.
%>
Here is the thread dump:
java.lang.ClassCastException: weblogic.net.http.HttpsURLConnection
at jsp_servlet._payPal.__verify._jspService(__verify.java:150)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:120)
at weblogic.servlet.internal.ServletContextImpl.invokeServlet(ServletContextImpl.java:945)
at weblogic.servlet.internal.ServletContextImpl.invokeServlet(ServletContextImpl.java:909)
at weblogic.servlet.internal.ServletContextManager.invokeServlet(ServletContextManager.java:269)
at weblogic.socket.MuxableSocketHTTP.invokeServlet(MuxableSocketHTTP.java:392)
at weblogic.socket.MuxableSocketHTTP.execute(MuxableSocketHTTP.java:274)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:130)
I think I need to register an HTTPS URLStreamHandler when
instantiating my URL object so I receive a
com.sun.net.ssl.HttpsURLConnection instead of a
weblogic.net.http.HttpsURLConnection - like so:
URL url = new URL("https", "some.site.com", 443, "/some/uri", new some.URLStreamHandler());
Any help is greatly appreciated.
-SS

you should use specifal constructor .. for url..
some thing like..
URL( "https","www.verisign.com","443","",new
com.sun.net.ssl.internal.www.protocol.https.Handler());
thanks
kiran
"sstaats" <[email protected]> wrote in message
news:[email protected]...
>
I am trying to POST, from a jsp within weblogic,
to an outside https URL. It appears to me that
weblogic.net.http.HttpsURLConnection cannot POST
to a connection.
I am now trying to use Sun's JSSE 1.0.3.
I've installed jcert.jar, jnet.jar and jsse.jar to
C:\usr\local\java\jdk1.3.1_04\jre\lib\ext
Here is the relevant code:
<%@ pageimport="java.io.*,java.net.*,java.util.*,java.lang.*,javax.servlet.*,java.se
curity.*,com.sun.net.ssl.*"
%>
<%
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
System.setProperty("java.protocol.handler.pkgs",com.sun.net.ssl.internal.www.protocol");
url = new java.net.URL("https://www.some-secure-site.com"); // This is
where
the ClassCastException occurs.
%>
Here is the thread dump:
java.lang.ClassCastException: weblogic.net.http.HttpsURLConnection
at jsp_servlet._payPal.__verify._jspService(__verify.java:150)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
atweblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
:120)
atweblogic.servlet.internal.ServletContextImpl.invokeServlet(ServletContextImp
l.java:945)
atweblogic.servlet.internal.ServletContextImpl.invokeServlet(ServletContextImp
l.java:909)
atweblogic.servlet.internal.ServletContextManager.invokeServlet(ServletContext
Manager.java:269)
atweblogic.socket.MuxableSocketHTTP.invokeServlet(MuxableSocketHTTP.java:392)
atweblogic.socket.MuxableSocketHTTP.execute(MuxableSocketHTTP.java:274)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:130)
I think I need to register an HTTPS URLStreamHandler when
instantiating my URL object so I receive a
com.sun.net.ssl.HttpsURLConnection instead of a
weblogic.net.http.HttpsURLConnection - like so:
URL url = new URL("https", "some.site.com", 443, "/some/uri", newsome.URLStreamHandler());
>
Any help is greatly appreciated.
-SS

Similar Messages

How to use URL class instead of Socket

Hi all. I am developing a small inventory control system for a warehouse.
I am suing a Java desktop application that connects to a servlet via Internet.
I have been searching the net how to use JSSE for my application since i am new to secure sockets and JSSE.
Since I havent implemented security In my current system yet, i am using URLConnection conn = url.openConnection(); to connect to a servlet.
However, in a good tutorial that I found about JSSE, sockets are used directly for connection, insted of URLCOnnection. They use the code like this: SSLSocketFactory sf = sslContext.getSocketFactory();
SSLSocket socket = (SSLSocket)sf.createSocket( host, port ); Since, using sockets is overly complex for me, I want to make use of the URLConnection class instead to keep it simple.
Could anyone please tell me how to make use of the URLConnection class to establish secure http connection.
by the way, the tutorial is here:
http://www.panix.com/~mito/articles/articles/jsse/j-jsse-ltr.pdf
thanks.

Here you go. The following code snippet allows you post data to http URL. If you have to do the same to https URL , please let me know.
OutputStream writeOut = null;
HttpURLConnection appConnection = null;
URL appUrlOpen = null;
//data to be posted.
String data = "This is the test message to post";
byte[] bytesData = this.data.getBytes();
appUrlOpen = new URL(""Your Servlet URL");
appConnection = (HttpURLConnection) appUrlOpen.openConnection();
appConnection.setDoOutput(true);
appConnection.setDoInput(true);
appConnection.setUseCaches(false);
appConnection.setInstanceFollowRedirects(false);
appConnection.setRequestMethod("post");
appConnection.setRequestProperty("Content-Type","application/text");
appConnection.setRequestProperty("Content-length", String.valueOf(bytesData.length));
writeOut=appConnection.getOutputStream();
writeOut.write(bytesData);
writeOut.flush();
writeOut.close();
String inputLine;
StringBuffer sb = new StringBuffer();
reader = new BufferedReader(new InputStreamReader(appConnection.getInputStream()));
char chars[] = new char[1024];
int len = 0;
//Write chunks of characters to the StringBuffer
while ((len = reader.read(chars, 0, chars.length)) >= 0)
sb.append(chars, 0, len);
System.out.println("Response " + sb.toString());
reader.close();
sb=null;
chars = null;
responseBytes = null;
******************************************************************************************

How to use HTTPS with JSSE URLConnection in servlet

Hi, I have a servlet that calls another servlet using the URLConnection class. This seems to work very well if I am using http. However when trying to call it using https using JSSE I get the following error:
"javax.net.ssl.SSLHandshakeException: untrusted server cert chain."
The following is the code that I am using in the servlet:
          java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
          System.getProperties().put("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
          this.servlet = new URL(servletURL);
          URLConnection conServlet = servlet.openConnection();
Both of these servlets are under IIS on my machine. I am able to execute each of the servlets from the browser using https directly. Does this sounds like an SSL certifcate problem or is that something in the Java code? Any ideas greatly appreciated.

Hi,
Perhaps you can create your own trust manager. I've found this example in another newsgroup: (please note that this example trusts everyone, but you can modify the trust manager as you wish)
if (putUrl.startsWith("https"))
//set up to handle SSL if necessary
System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
System.setProperty("javax.net.debug", "ssl,handshake,data,trustmanager");
Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
//use our own trust manager so we can always trust
//the URL entered in the configuration.
X509TrustManager tm = new MyX509TrustManager();
KeyManager []km = null;
TrustManager []tma = {tm};
SSLContext sc = SSLContext.getInstance("ssl");
sc.init(km,tma,new java.security.SecureRandom());
SSLSocketFactory sf1 = sc.getSocketFactory();
HttpsURLConnection.setDefaultSSLSocketFactory (sf1);
m_url = new URL (putUrl);
class MyX509TrustManager implements X509TrustManager {
public boolean isClientTrusted(X509Certificate[] chain) {
return true;
public boolean isServerTrusted(X509Certificate[] chain) {
return true;
public X509Certificate[] getAcceptedIssuers() {
return null;
}Hope this helps,
Kurt.

Problem in SSL programation client in Weblogic 5.1 using JSSE

How to solve this Exception. When I sent more than 8000 bytes of data in the request weblogic 5.1 in solaris server gives me this error. But the same server and same configuration in Window NT with same SSLClient program does not give any expection even if i send 60000 bytes in the request.
SSLClient Program used given below. How to solve this problem. Any server setting is required.
Exception got in the weblogic server 5.1 in solaris server
weblogic.socket.MaxMessageSizeExceededException: [Incoming HTTP request headers of size 8320 bytes exceeds the configured maximum of 8192 bytes]
at weblogic.socket.MuxableSocketHTTP.incrementBufferOffset(MuxableSocketHTTP.java:111)
at weblogic.socket.SSLFilter.isMessageComplete(SSLFilter.java:195)
at weblogic.socket.PosixSocketMuxer.processSockets(PosixSocketMuxer.java:361)
at weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:23)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:129)
SSLClient Program used: JSSE 1.0.2 package is used for SSL
import java.io.*;
import javax.net.ssl.*;
import java.net.*;
import com.sun.net.ssl.*;
import java.security.KeyStore;
public class SSLClient {
     public SSLClientCheck()
          System.out.println(" SSLClient is instantiated ...");
     public String getSSLConnection(String host,String port,String keystorepwd,String truststorepwd,
                                        String keystorepath,String truststorepath,String filepath,String parName,String message)throws Exception
          String output = "";
          int iport = Integer.parseInt(port);
                         SSLSocketFactory factory = null;
                         SSLContext ctx;
                         KeyManagerFactory kmf;
                         KeyStore ks;
                         KeyStore ks2;
                         TrustManagerFactory tmf;
                         char[] storepass = keystorepwd.toCharArray();
                         char[] truststorepass = truststorepwd.toCharArray();
                         ctx = SSLContext.getInstance("SSLv3");
                         kmf = KeyManagerFactory.getInstance("SunX509");
                         ks = KeyStore.getInstance("JKS");
                         ks.load(new FileInputStream(keystorepath), storepass);
                         kmf.init(ks, storepass);
                         tmf = TrustManagerFactory.getInstance("SunX509");
                         ks2 = KeyStore.getInstance("JKS");
                         ks2.load(new FileInputStream(truststorepath), truststorepass);
                         tmf.init(ks2);
                         ctx.init(kmf.getKeyManagers(),tmf.getTrustManagers(), null);
                         factory = ctx.getSocketFactory();
               SSLSocket socket = (SSLSocket)factory.createSocket(host,iport);
               socket.startHandshake();
               PrintWriter out = new PrintWriter(
                              new BufferedWriter(
                              new OutputStreamWriter(
                                   socket.getOutputStream())));
               out.println("GET " + filepath+"?"+parName+"="+URLEncoder.encode(message) + " HTTP/1.0");
               out.println();
               out.flush();
               if (out.checkError())
                    System.out.println("SSLSocketClient: java.io.PrintWriter error");
               /* read response */
               BufferedReader in = new BufferedReader(
                              new InputStreamReader(
                              socket.getInputStream()));
                    String inputLine ;
                    while ((inputLine = in.readLine()) != null){
                    output = output+inputLine;
                         //System.out.println(inputLine);
               in.close();
               out.close();
               socket.close();
          return output;
     public static void main(String args[])
               String host = "host name";
               String port="7001";
               String keystorepwd="cqrcqr";
               String keystorepwd="changeit";
               String keystorepath ="d:/weblogic/myserver/certificate/cqrstore";
               String truststorepath="d:/jdk1.3/jre/security/cacerts";
               String filepath="/servlets/SSLDemo";
               String parName="xml_message";
               String message="xml message";// of size more than 9000 bytes
          try{
          SSLClient ssl = new SSLClient();
          String output = ssl.getSSLConnection(host,port,keystorepwd,keystorepwd,keystorepath,truststorepath,filepath,parName,message);
          System.out.println(output);
          catch(Exception e)
               e.printStackTrace();
}

Maybe you should consider upgrading your Weblogic to a newer one. It might resolve the issue.

Create outgoing SSL connections in WebLogic 4.5.1 using JSSE

Hi,
Does anyone know how to create outgoing SSL connections from a WLS 4.5.1 using
JSSE.
I've implemented an application using JSSE for POSTing data to an HTTPS server
that requires client authentication and it worked fine. But when used inside the
WebLogic server it doesn't work, because the WLS SSL classes are used instead
of the JSSE ones. It returns a "java.io.IOException: Alert: fatal handshake_failure".
If the ssl.enable property is set to false probably it will work, but I need it
set to true. Does anyone a way to solve this problem?
Thanks in advance.

Hi,
I also need to do the same in weblogic 5.1 (sp8). I know
it is not possible with JSSE, but how do I achieve with
weblogic implementation of Https? I am getting "Non
supported cipher requested" error. How do I remove this message. It will be
of great help if someone can list
down the configuration step in weblogic. I am trying
to find it in weblogic documentation but no success so far.
Thanks in advance for your help!
- Rishi
"Jerry" <[email protected]> wrote in message
news:[email protected]..
Hi Nuno,
I don't think that you can use JSSE to make outgoing SSL connections inWLS 4.5.1 because
of the many conflicts between JSSE and the WLS SSL classes
In versions of 5.1 (such as sp9 and up), and also 6.0 and 6.1, BEA gotrid of these
conflicts to make the use of JSSE possible with WebLogic to do outgoingSSL.
In 4.5.1, I believe you are out of luck.
Joe Jerry
Nuno Carvalho wrote:
Hi,
Does anyone know how to create outgoing SSL connections from a WLS 4.5.1
using
JSSE.
I've implemented an application using JSSE for POSTing data to an HTTPSserver
that requires client authentication and it worked fine. But when usedinside the
WebLogic server it doesn't work, because the WLS SSL classes are usedinstead
of the JSSE ones. It returns a "java.io.IOException: Alert: fatalhandshake_failure".
If the ssl.enable property is set to false probably it will work, but Ineed it
set to true. Does anyone a way to solve this problem?
Thanks in advance.

How to config JSSE?

Hi, i am using uddi4j which requires the JSSE to be configured, in the documentation of it, it just mentioned i need to modify the java.security file under the %JAVA_HOME%/jre/lib/security directory. But i just don't know how.
would you please tell me if one java application want to use JSSE for https connection, which steps should i take? many many thanks:)

If you are using java 1.4 > JSSE is now included in the release and you shouldn't have to do anything.
If you are using an older JVM, you can also add the jsse.jar file into your classpath and register the appropriate provider implementation class:
System.setProperty("java.protocol.handler.pkgs",
"com.sun.net.ssl.internal.www.protocol");
java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
Or try googling the subject and look at links similar to the following:
http://www-128.ibm.com/developerworks/webservices/library/ws-uddi4j2.html
Cheers
Todd

URLConnection.setConnectTimeout(): how to use?

I wonder how to use URLConnection.setConnectTimeout()? I need to have a URLConnection object (in my case: HttpURLConnection). But the only way to do this for an URL is:
HttpURLConnection con = (HttpURLConnection) url.openConnection(); right? But then it's too late to set a connection timeout. HttpURLConnection has only a protected constructor, so I can't use it. Is ther another way?

I don't call connect():
                con = (HttpURLConnection) url.openConnection(); //can take forever
                con.setConnectTimeout(timeout);
                con.setReadTimeout(timeout);
                //avoid "java.io.IOException: HTTPS hostname wrong: should be <217.5.135.142>"
                if (con instanceof HttpsURLConnection) { //HTTPS URL?
                    ((HttpsURLConnection) con).setHostnameVerifier(new HostnameVerifier() {
                        public boolean verify(String hostname, SSLSession session) {
                            return true;
                String contentEncoding = con.getContentEncoding();
                is = con.getInputStream();
                //get correct input stream for compressed data:
                if (contentEncoding != null && contentEncoding.equalsIgnoreCase("gzip")) {
                    is = new GZIPInputStream(is); //reads 2 bytes to determin GZIP stream!
                Utils.writeStream(is, outputStream);

Classloader Exception when using JSSE within WL 6.1 SP4

I am trying to use JSSE to create my own SSL listener within weblogic. It works
fine when I use it outside weblogic but I seem to run into a wierd classloader
issue when I try to bring up the listener, from within weblogic, as part of a
startup class.
From what I can tell, weblogic seems to load some classes from the com.RSA.jsafe
that are potentially unsigned or has a different signature than the classes that
are loaded from jsse jar. This happens only when weblogic's SSL port is enabled.
Anyone know how to get around this? The only way I was able to get around this
is by specifying
"com.sun.net.ssl.internal.ssl.Provider" as the first security provider in the
java.security file but I would like to avoid this, if possible.
java.security.NoSuchAlgorithmException: class com.sun.net.ssl.internal.ssl.JSA_RSAKeyFactory
configured for KeyFactory(provider: null) cannot be accessed.
class "COM.rsa.jsafe.SunJSSE_aa"'s signer information does not match signer information
of other classes in the same package
     at com.epiphany.shr.push.webserver.JsseListener.newServerSocket(JsseListener.java:165)
     at com.epiphany.shr.push.webserver.BaseListener.start(BaseListener.java:302)
     at com.epiphany.shr.push.webserver.SocketListener.start(SocketListener.java:64)
     at com.epiphany.shr.push.webserver.HttpServer.start(HttpServer.java:111)
     at com.epiphany.shr.push.webserver.HttpServer.startHttpServer(HttpServer.java:45)

Hi Yatin,
I cannot comment on whether you have taken the correct approach but if you are
not running Service Pack 2 I believe there are a couple of JSSE fixes in it.
Kind Regards,
Richard Wallace
Senior Developer Relations Engineer
BEA Support.
"Yatin Kulkarni" <[email protected]> wrote:
>
>
>
Hi,
I am attaching a small servlet that I wrote and tested on a Tomcat server
that
uses JSSE and HTTPS to communicate with an authentication server. Once,
I had
JSSE properly configured under Tomcat the code worked just fine. However,
when
I deployed the servlet on a WebLogic 6.1 server (all the three jar files
jcert.jar,
jnet.jar, and jsse.jar are in the servers class path and a security provider
has
been added to the java.security file for the JDK) I am not getting any
certificates
from the authentication server and I also get the following exception
java.io.FileNotFoundException: Response: '403: Forbidden' for url: 'https://<authentication
server url>
Am I forgetting something? What is the suggested process for using JSSE
with WebLogic
6.1?
Any help on this matter would be greatly appreciated.
Regards,
Yatin Kulkarni
Fremont, CA

How to open an HttpsURLConnection?

Sorry to ask such a simple question. I am new to jsse and I would like to ask how to open and HttpsURLConnection. Any simple procedure outline or reference material are welcomed.
Thank you very much~

Hi ,
URL u = new URL("https://urservername");
HttpsURLConnection huc=(HttpsURLConnection)u.openConnection();
For this u need to set system properties and JSSE support.
IT will accept only https request.If u try for Http it wont work
I hope this will help u
Regards
Sudha.K.Reddy

How to use one email adress for multiple recipients

Hello,
I'd like to know how to use one email adress for multiple recipients.
this would be very useful or projects. for example;
if i send one mail to [email protected], all people in this project get an email.
I will add the people in this project myself.
I know it is possible, but I don't know how to do it ;-)
please help me!

Hope this help.
_http://technet.microsoft.com/en-us/library/cc164331(v=exchg.65) .aspx

Can't figure out how to use home sharing

Since the latest couple iTunes updates, my family and I can not figure out how to use home sharing. Everyone in our household has their own iTunes, and for a long time we would just share our music through home sharing. But with the updates, so much has changed that we can no longer figure out how to use it.
I have a lot of purchased albums on another laptop in the house, that im trying to move it all over to my own iTunes, and I have spent a long time searching the internet, and everything. And I just can't figure out how to do it. So.... how does it work now? I would really like to get these albums from my moms iTunes, onto mine. I would hate to have to buy them all over again.
If anyone is able to help me out here, that would be great! Thanks!

The problem im having is that after I am in another library through home sharing, I can't figure out how to select an album and import it to my library. They used to have it set up so that you just highlight all of the songs you want, and then all you had to do was click import. Now I don't even see an import button, or anything else like it. So im lost... I don't know if it's something im doing wrong, or if our home sharing system just isn't working properly.
Thanks for the help.

How to use the same POWL query for multiple users

Hello,
I have defined a POWL query which executes properly. But if I map the same POWL query to 2 portal users and the 2 portal users try to access the same page simultaneously then it gives an error message to one of the users that
"Query 'ABC' is already open in another session."
where 'ABC' is the query name.
Can you please tell me how to use the same POWL query for multiple users ?
A fast reply would be highly appreciated.
Thanks and Regards,
Sandhya

Batch processing usually involves using actions you have recorded. In Action you can insert Path that can be used during processing documents. Path have some size so you may want to only process document that have the same size. Look in the Actions Palette fly-out menu for insert path. It inserts|records the current document work path into the action being worked on and when the action is played it inserts the path into the document as the current work path..

How to use airport time capsule with multiple computers?

I'm sure there are some thread about this but i couldn't find it... so sorry for that but hear me out! =)
I bought the AirPort Time Capsule to back up my MBP
And so i did.
then i thought "let give this one a fresh start" so i erased all of it with the disk utility and re-installed the MBP from the recovery disk.
I dont want all of the stuff i backed up just a few files and some pictures so i brought that back.. so far so good.
Now i want to do a new back up of my MBP so i open time machine settings, pick the drive on the time capsule and then "Choose" i wait for the beck up to begin, and then it fails. It says (sorry for my bad english, im swedish haha) "the mount /Volume/Data-1/StiflersMBP.sparsebundle is already in use for back up.
this is what i want:
i want the "StiflersMBP.sparsebundle" to just be so i can get some stuf when i need them. it's never to be erased.
i want to make a new back up of my MBP as if it's a second computer...
so guys and girls, what is the easiest and best solution?
Best regards!

TM does not work like that.
If you want files to use later.. do not use TM.
Or do not use TM to the same location. Plug a USB drive into the computer and use that as the target for the permanent backup.
Read some details of how TM works so you understand what it will do.
http://pondini.org/TM/Works.html
Use a clone or different software for a permanent backup.
http://pondini.org/TM/Clones.html
How to use TC
http://pondini.org/TM/Time_Capsule.html
This is helpful.. particularly Q3.
Why you don't want to use TM.
Q20 here. http://pondini.org/TM/FAQ.html

How to use multiple ipods on one account

I have an Ipod classic and just bought my sons two nano's how do I use these on the same account without changing my account info?

Take a look here:
How to use multiple iPods with one computer
Forum Tip: Since you're new here, you've probably not discovered the Search feature available on every Discussions page, but next time, it might save you time (and everyone else from having to answer the same question multiple times) if you search a couple of ways for a topic, both in the relevant forums, in the User Tips Library and in the Apple Knowledge Base before you post a question.
Regards.

How to use a Table View in AppleScriptObjC

How can I use a table view and add data to it? And how can I display a button cell and image cell in the table? Thanks.

Hi all,
Actually i need some more clarification. How to use the same select statement, if i've to use the tabname in the where clause too?
for ex : select * from (tab_name) where....?
Can we do inner join on such select statements? If so how?
Thanks & Regards,
Mallik.

How to use JSSE HttpsURLConnection in WL 5.1

Similar Messages

Maybe you are looking for