On 14 September 2010 18:09, Oliver Siegmar <[email protected]> wrote: > Hello, > > I'd like to access content that is provided by https but my code always fails > with an SSLException. I tried it with a very simple example: > > > import org.apache.http.client.HttpClient; > import org.apache.http.client.methods.HttpGet; > import org.apache.http.impl.client.DefaultHttpClient; > > public class HttpsTest { > > public static void main(final String[] args) throws Exception { > final HttpClient client = new DefaultHttpClient(); > final HttpGet req = new HttpGet("https://www.apache.org";); > client.execute(req); > } > > } >
Works OK for me. What version of HttpClient are you using? Java? OS? > This code fails with: > > Exception in thread "main" javax.net.ssl.SSLException: hostname in certificate > didn't match: <140.211.11.131> != <*.apache.org> > at > org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:220) > at > org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(BrowserCompatHostnameVerifier.java:54) > at > org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:149) > at > org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:130) > at > org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:399) > at > org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:143) > at > org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:149) > at > org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:108) > at > org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415) > at > org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:641) > at > org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:576) > at > org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:554) > at HttpsTest.fails(HttpsTest.java:25) > at HttpsTest.main(HttpsTest.java:12) > > > > It doesn't has anything to do with wildcard certificates. Whenever I get this > exception I have a combination of <ip-address> != <common-name-of-certificate> > as exception message. What am I > doing wrong? Unfortunately I couldn't find a simple SSL example in the docs, > only stuff for customizing SSL configuration. > > > > Bye > > Oliver > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
