Verify() within HostnameVerifier is not called

Question

My intension is when I try to connect to URL, I have to check for whether the url is https and the certifact name maps to the issuedTo name of the certifacte. So I have written the code to check for the certificate name validation in verify method of HostnameVerifier class. But I dont think this method is called. Because am not able to see any SOPs written inside the method. But it prints out the contents of the page only if the url is https. Pls advice how can i check for certificate name. Below is my code.
import java.io.*;
import java.net.*;
import java.util.*;
import java.lang.reflect.*;
import javax.net.ssl.*;
import javax.naming.directory.*;
import java.security.cert.X509Certificate;
* SOAPTester
* AJ
public class SOAPTester {
//private static final String URL_TO_CONNECT = "http://localhost:8080/testapp/HelloWorld";
private static final String URL_TO_CONNECT = "https://uat-www2.netxpro.inautix.com";
//private static final String URL_TO_CONNECT = "http://java.sun.com";
private static final String PROXY_HOST = "172.25.10.10";
private static final String PROXY_PORT = "8080";
private static final String DNS_HOST = "dns://172.19.110.217";
private static final String INPUT_FILE = "c:/data/sample.xml";
private static final String SOAP_ACTION = "";
private static String username = "IN\\ajayaprakash";
private static String password = "******";
private static boolean enableDNSLookup = false;
private static boolean enableHttpsProxy = false;
private static boolean enableProxyAuth = false;
private static URL my_new_url = null;
public SOAPTester(String args[]) throws Exception {
my_new_url = new URL(URL_TO_CONNECT);
readOptions(args);
public void execute() throws Exception {
if(enableHttpsProxy)
enableHttpsProxy();
if(enableDNSLookup)
initDNSLookup();
connectToUrl(my_new_url);
private void enableHttpsProxy() {
System.setProperty("https.proxySet","true");
System.setProperty("https.proxyHost",PROXY_HOST);
System.setProperty("https.proxyPort",PROXY_PORT);
System.setProperty("http.proxySet","true");
System.setProperty("http.proxyHost",PROXY_HOST);
System.setProperty("http.proxyPort",PROXY_PORT);
private void initDNSLookup() throws Exception {
String dns_host = DNS_HOST;
InitialDirContext dnsLookup = null;
printMessage("Initializing DNS Lookup...");
if(dnsLookup == null) {
try {
Hashtable env = new Hashtable();
env.put("java.naming.factory.initial", "com.sun.jndi.dns.DnsContextFactory");
env.put("java.naming.provider.url", dns_host);
dnsLookup = new InitialDirContext(env);
} catch(Exception exp) {
printError("Failed to init DNS lookups");
throw exp;
private void connectToUrl(URL mynewurl) throws Exception {
try {
printMessage("Connecting to "+mynewurl);
HttpURLConnection soapConn = (HttpURLConnection) mynewurl.openConnection();
if(soapConn instanceof HttpsURLConnection)
((HttpsURLConnection)soapConn).setHostnameVerifier(new MyHostNameVerifier(URL_TO_CONNECT));
// Set request method to POST
soapConn.setRequestMethod("POST");
// Prepare for both input and output on POST
soapConn.setDoOutput(true);
soapConn.setDoInput(true);
// Turn off caching
soapConn.setUseCaches(false);
// Work around a Netscape bug
soapConn.setRequestProperty("Content-Type", "text/xml; charset=\"utf-8\"");
soapConn.setRequestProperty("SOAPAction",SOAP_ACTION);
//Proxy authorization needed
if(enableProxyAuth) {
String encoded = new String
((new sun.misc.BASE64Encoder()).encode(new String(username+":"+password).getBytes()));
soapConn.setRequestProperty("Proxy-Authorization", "Basic " + encoded);
OutputStreamWriter out = out = new OutputStreamWriter(soapConn.getOutputStream (),"UTF8");
BufferedReader bread = new BufferedReader(new InputStreamReader(new FileInputStream(INPUT_FILE)));
String line = "";
while(bread.ready()) {
line = bread.readLine() ;
if (line == null) break;
out.write (line,0,line.length());
bread.close();
out.flush ();
out.close();
long responseCode = soapConn.getResponseCode(); // force a wait until the response is ready
printMessage("HTTP Response code received = "+responseCode);
printMessage("HTTP Response received from server :\n");
BufferedReader br = new BufferedReader(new InputStreamReader(soapConn.getInputStream()));
line = null;
System.out.println("===================================================================");
while ((line = br.readLine()) != null) {
System.out.println(line);
System.out.println("===================================================================");
br.close();
soapConn.disconnect();
} catch(Exception e) {
printError("Unable to complete connection to URL");
throw e;
public static void main(String args[]) throws Exception {
SOAPTester tester = new SOAPTester(args);
tester.execute();
* MyHostNameVerifier
class MyHostNameVerifier implements HostnameVerifier {
private String myHostName;
public boolean verify(String urlHostname, SSLSession session)
          System.out.println("***Inside verify api***");
try {
java.security.cert.Certificate certs[] = session.getPeerCertificates();
String dn = ((X509Certificate)certs[0]).getSubjectDN().getName();
               String proHostName = "uat-www2.netxpro.inautix.com";
               int val = dn.indexOf(proHostName);
               System.out.println("Domain Name is>>"+dn+"<<"+val);
return dn.indexOf(proHostName) != -1;
} catch(Exception e) {
printError("Error verifying the Trust URL ="+e.getStackTrace());
return false;
//return true;
MyHostNameVerifier(String hostname)
          System.out.println("***Inside MyHostNameVerifier***");
myHostName = hostname;
private void readOptions(String opts[]) {
if(opts.length < 1)
return;
for(int cnt=0;cnt<opts.length;cnt++) {
if(opts[cnt].equals("-h")) {
printUsage();
break;
if(opts[cnt].equals("-d"))
enableDNSLookup = true;
if(opts[cnt].equals("-p"))
enableHttpsProxy = true;
if(opts[cnt].equals("-a")) {
enableProxyAuth = true;
password = opts[cnt+1];
private void printUsage() {
System.out.println("\n[Usage] java SOAPTester -[h][d][p][a]\n");
System.out.println("h = Print usage. This message");
System.out.println("d = Enable DNS lookup (optional)");
System.out.println("p = Enable HTTP Proxy. Change code to modify proxy URL (optional)");
System.out.println("a <password>= Enable Proxy Authentication.Supply password. Change code to modify USERID (optional)");
System.exit(0);
public void printMessage(String message) {
StringBuffer buf = new StringBuffer();
buf.append("[INFO] [");
buf.append((new Date()).toString());
buf.append("] ");
buf.append(message);
System.out.println(buf.toString());
public void printError(String message) {
StringBuffer buf = new StringBuffer();
buf.append("[ERROR] [");
buf.append((new Date()).toString());
buf.append("] ");
buf.append(message);
System.out.println(buf.toString());
}

Answer 1

Verifying the main bundle should be sufficient.
I ran a simple test last night.
#1 - Create Bundle with an Install Directory Action. (Install_Dir_Bundle)
#2 - Create a Bundle which had an Install Action of "Install Bundle Action" for Install_Dir_Bundle followed by launching a program action for a file in that directory. (Chain_Bundle)
#3 - Installed and Ran "Chain_Bundle" which created and populated the directory as well as launched the application.
#4 - I then deleted the directory and verified "Chain_Bundle". The directory was re-created and re-populated and the application successfully launched again.
Originally Posted by djbrightman
Hi
We have a bundle (several in fact!) that calls another bundle as an install action, prior to doing it's own thing.
(We often do this for large installers, to copy the install source locally prior to running a customised install e.g. license key)
Is there a way to force verify the called bundle?
e.g. we think the called bundle hasn't actually done what it set out to do, but ZCM seems to think it has completed, so we want to force it to run again
I've been looking at "zac bv <display name>" but reading around it seems to only work with files that the agent *thinks it has installed (i.e. those associated). In that case this relates to previous thread https://forums.novell.com/showthread...associated-%29
Any ideas or experience?
Cheers
David