RE: [OT] Ignore or Trust any certificate

2009-07-11 Thread Jason Pyeron
kme.printStackTrace(); > > } > > catch (NoSuchAlgorithmException nsae) > > { > > nsae.printStackTrace(); > > } > > } > > > > > > If you have access to the individial HttpURLConnection ob

Re: [OT] Ignore or Trust any certificate

2009-07-11 Thread kareem_s_m
; instead of using HttpURLConnection.setDefaultSSLSocketFactory and > changing the socket factory globally. > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.9 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAkpY8aIACgkQ9CaO5/Lv0PBmp

Re: [OT] Ignore or Trust any certificate

2009-07-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kareem, On 7/10/2009 2:46 PM, kareem_s_m wrote: > Is there a way in tomcat to ignore or trust any SSL certificate when > connecting to a site through https? I know there is some JAVA code for it. > But can we do it through tomcat or JVM settings too?

Re: Ignore or Trust any certificate

2009-07-11 Thread Hassan Schroeder
On Sat, Jul 11, 2009 at 12:44 AM, kareem_s_m wrote: > > I know about catching the exception. I just want to know if there is a way to > tell tomcat to ignoring or trusting any third party certificates. And I'm saying that Tomcat has *nothing to do with it*. It's your application making the reques

Re: Ignore or Trust any certificate

2009-07-11 Thread Andre-John Mas
On 11-Jul-2009, at 00:36, kareem_s_m wrote: So when my site connects to a site through HTTPS protocol, tomcat tires to validate the server certificate with the cacerts keystore in my JDK. Now if the server certificate is signed by a trusted authority then the connection is successful. B

Re: Ignore or Trust any certificate

2009-07-11 Thread kareem_s_m
-- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in context: http://www.nabble.com/Ignore--or-Trust-any-certificate-tp24432691p24438023.html Sent from the Tomcat - User maili

Re: Ignore or Trust any certificate

2009-07-10 Thread Hassan Schroeder
On Fri, Jul 10, 2009 at 9:36 PM, kareem_s_m wrote: > > So when my site connects to a site through HTTPS protocol, tomcat tires to Whoa. Your "site" doesn't connect to anything. And Tomcat doesn't "tire" (sic) anything. Your *application* is, wait, what? > Caught unhandled exception: javax.net.ss

RE: Ignore or Trust any certificate

2009-07-10 Thread kareem_s_m
gmail.com] >> Subject: RE: Ignore or Trust any certificate >> >> If my application is the client, and I am connecting to a website >> through a HTTP Post, then I want the tomcat (on which my website >> is running) to not validate the connecting site's certific

RE: Ignore or Trust any certificate

2009-07-10 Thread Caldarale, Charles R
> From: kareem_s_m [mailto:kareemud...@gmail.com] > Subject: RE: Ignore or Trust any certificate > > If my application is the client, and I am connecting to a website > through a HTTP Post, then I want the tomcat (on which my website > is running) to not validate the

RE: Ignore or Trust any certificate

2009-07-10 Thread kareem_s_m
Server Certs If my application is the client, and I am connecting to a website through a HTTP Post, then I want the tomcat (on which my website is running) to not validate the connecting site's certificate. It should either ignore or trust any certificate. > -Original

RE: Ignore or Trust any certificate

2009-07-10 Thread Jason Pyeron
ut can we do it through tomcat or JVM settings too? Are you talking about client or server certs? From the user's browser or by the user's browser? > > Regards, > Kareem > -- > View this message in context: > http://www.nabble.com/Ignore--or-Trust-any-certificate-t

Ignore or Trust any certificate

2009-07-10 Thread kareem_s_m
-Trust-any-certificate-tp24432691p24432691.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org