RMI / SSL and self signed certifcate

Question

hi,
is it possible to use RMI over SSL with an self signed certifcate? how? could i automatically install a self signed certificate on client side?
or must i apply an certicficate from e.g. verisign?
thx mike

Answer 1

Define a dummy Trust Manager to skip server certificate verification in the RMISSLClientSocketFactory. For example,
import javax.net.ssl.*;
import java.security.cert.*;
class DummyTrustManager implements X509TrustManager
    public void checkClientTrusted(X509Certificate[] x509CertificateArray, String string) throws CertificateException
    public void checkServerTrusted(X509Certificate[] x509CertificateArray, String string) throws CertificateException
    public boolean isClientTrusted( X509Certificate[] cert)
        return true;
    public boolean isServerTrusted( X509Certificate[] cert)
        return true;
    public X509Certificate[] getAcceptedIssuers()
        return new X509Certificate[0];
}When you initialize your SSLContext in the RMISSLClientSocketFactory, use ctx.init(null, new TrustManager[]{new DummyTrustManager()}, null);
import java.io.*;
import java.net.*;
import java.rmi.server.*;
import javax.net.ssl.*;
public class RMISSLClientSocketFactory implements RMIClientSocketFactory, Serializable
    static private SSLSocketFactory _defaultSSLSocketFactory;
    static
        try
            SSLContext ctx = SSLContext.getInstance("TLS");
            ctx.init(null, new TrustManager[]{new DummyTrustManager()}, null);
            _defaultSSLSocketFactory = ctx.getSocketFactory();
        catch (Exception ex)
        if (_defaultSSLSocketFactory==null)
            _defaultSSLSocketFactory =(javax.net.ssl.SSLSocketFactory)javax.net.ssl.SSLSocketFactory.getDefault();
    public Socket createSocket(String host, int port)  throws IOException
        return _defaultSSLSocketFactory.createSocket(host, port);