Https post

[Mark Hughes]

Hey guys
Im trying to make a post to a https web site,
basically im using the below code to do the http post which works for a http web site but not for a https web site. Can anybody shed some light on my problem as to why it would not work, i suspect due to security certificats or SSL layers or something. If some body has a link or code that works to make a https post that would be great too.

anyway heres the code i found for a normal http post

try {
        // Construct data
        String data = URLEncoder.encode("key1", "UTF-8") + "=" + URLEncoder.encode("value1", "UTF-8");
        data += "&" + URLEncoder.encode("key2", "UTF-8") + "=" + URLEncoder.encode("value2", "UTF-8");
    
        // Send data
        URL url = new URL("http://hostname:80/cgi");
        URLConnection conn = url.openConnection();
        conn.setDoOutput(true);
        OutputStreamWriter wr = new OutputStreamWriter(conn.getOutputStream());
        wr.write(data);
        wr.flush();
    
        // Get the response
        BufferedReader rd = new BufferedReader(new InputStreamReader(conn.getInputStream()));
        String line;
        while ((line = rd.readLine()) != null) {
            // Process line...
        }
        wr.close();
        rd.close();
    } catch (Exception e) {
    }

Best Mark
any help appreciated

[Freddy Wong]

If it's an HTTPS website, you need the SSL certificate. So you need to tell where your truststore and keystore are. Add these lines in your code.

    
System.setProperty("javax.net.ssl.trustStore", "truststore.jks");
System.setProperty("javax.net.ssl.keyStore", "keystore.jks");
System.setProperty("javax.net.ssl.trustStorePassword", "password");
System.setProperty("javax.net.ssl.keyStorePassword", "password");

You also need to import the SSL certificate into you truststore if it's not already inside.

    
keytool -import -trustcacerts -file <cert.cer> -keystore truststore.jks -alias <whatever>

[Mark Hughes]

cool thanks Freddy, appreciate your help.
Im just looking at the code, when im setting the system.properties there is a field called password, will i need to change that to something or is it ok the way is is?

also the import code syntax looks a bit different to me, copying and pasting it directly into eclipse throws an error, what do i need to do to get fix the syntax error. Sorry if that sounds like a silly question

[Mark Hughes]

i tried running that code you gave me, and it throw the following exception

java.net.SocketException: Default SSL context init failed: null
at javax.net.ssl.DefaultSSLSocketFactory.createSocket(SSLSocketFactory.java:163)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:372)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:170)
at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:839)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:230)
at org.test.https.httpstest.main(httpstest.java:53)

I basically set the system properties, than attempted the http post but the error was thrown straight away once i tried to open the connection.

Also on the import, is that done throw the command line or does it need to be done programmatically, if so how do i go about doing that.

Thanks again for your help