How to build the EndPoint correctly using jax-ws?

Question

I am using the bootstrap method to build my endpoints dynamically by making the WSDL available locally. For both http and https, but I am pretty sure I am going somewhere wrong while building them for https.

Map<String, Object> context = ((BindingProvider)control).getRequestContext();
URL address = mInstance.getConnectionEndpoint();
    if (address != null && Settings.getSettings().isUsingHttpConnection()) {
        context.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY,address.toString());
        System.out.println(address);
    }
    else{
        //for https

HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier()
        {
            public boolean verify(String hostname, SSLSession session)
            {
                if (hostname.equals("myhostname"))
                    return true;
                return false;
            }
        });

        address = mInstance.getSecureConnectionEndpoint();
        context.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY,address.toString());
    }

Where getConnectionEndpoint and getSecureConnectionEndpoint look like:

   public URL getConnectionEndpoint() {
    URL url = null;
    try {
        int port = 50013;
        url = new URL("http", mHost.getHostAddress(), port, "");
    } catch (MalformedURLException e) {
        e.printStackTrace();
    }
    return url;
}

public URL getSecureConnectionEndpoint() {
    URL url = null;
    try {
        int port = 50014;
        url = new URL("https", mHost.getHostAddress(), port, "");
    } catch (MalformedURLException e) {
        e.printStackTrace();
    }
    return url;
}

This works fine when I use http. But for https I always end up getting this error that says:

com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present

Obviously googling this error I found answers that it might be due to improper importing of the server and client SSL certificates in the Java TrustStore.

But I am pretty confident that the issue is not that.

The child errors of the parent error mentioned above look something like this:

at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(Unknown Source)

I would be grateful to you if you can help me solve this issue! Cheers in advance.

score 0 · Accepted Answer · edited May 23 '17 at 11:51

0

The problem is likely that the value returned from mHost.getHostAddress() is a different hostname than the common name on the certificate offered by the server. For example, if localhost is the the value of mHost.getHostAddress() yet the SSL cert is issued to 127.0.0.1 (or vice versa) you may get this issue.

This post identifies a code workaround in case regenerating and reinstalling the certificate with a different CN is not viable or desirable. It involves using the HostnameVerifier mechanism of HttpsUrlConnection.

edited May 23 '17 at 11:51

Community

1
1

answered Jul 23 '15 at 00:59

Scott Heaberlin

3,364
1
23
22

Thank you, but I still get the error. Check my edit above! – agenthost Jul 23 '15 at 11:43
Post the value being returned by `mHost.getHostAddress()` and the common name on the cert. The two must match or you may get the error you are encountering. – Scott Heaberlin Jul 23 '15 at 12:37
It worked! I was using the wrong domain name for the CN, that was the problem. But thanks for your help :) – agenthost Jul 23 '15 at 13:17

How to build the EndPoint correctly using jax-ws?

1 Answers1