Apache HTTP Components SSL Request

[Alan Blass]

Hi!

I am trying to upgrade the Apache HTTP Client code from version 3 to version 4. I am doing a http POST to a server.

The original version 3 code is:

import java.io.IOException;
import org.apache.commons.httpclient.Credentials;
import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpException;
import org.apache.commons.httpclient.UsernamePasswordCredentials;
import org.apache.commons.httpclient.auth.AuthScope;
import org.apache.commons.httpclient.methods.EntityEnclosingMethod;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.methods.RequestEntity;
import org.apache.commons.httpclient.methods.StringRequestEntity;
import org.apache.commons.httpclient.protocol.Protocol;
import org.apache.commons.httpclient.protocol.ProtocolSocketFactory;




public class PostMain {

	/**
	 * @param args
	 */
	public static void main(String[] args) {
		
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////
///////////////THIS SECTION CONTAINS VARIABLES THAT ARE TO BE MODIFIED FOR YOUR PARTICULAR INSTANCE//////////////

		String DomainName = "SnsServer.someCompanny.com";//enter the domain name 
		
		String usernameOfApiCaller = "adminUsername";//enter the username of the user making an API call
		String passwordOfApiCaller = "adminPassword";//enter the above user's password
				
		
///////////////END OF SECTION. CODE BEYOND THIS POINT DOES NOT NEED TO BE MODIFIED TO EXECUTE SUCCESSFULLY///////
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////
		
		//	   1.  Create an instance of HttpClient.
		HttpClient client = new HttpClient();
		
		//authentication
		client.getParams().setAuthenticationPreemptive(true);
		Credentials defaultCreds = new UsernamePasswordCredentials(usernameOfApiCaller, passwordOfApiCaller);
		client.getState().setCredentials(new AuthScope(DomainName, 8443, AuthScope.ANY_REALM), defaultCreds);
		
		//create a socket factory using EasySSLProtocolSocketFactory();
		ProtocolSocketFactory socketFactory = new EasySSLProtocolSocketFactory();
		Protocol https = new Protocol( "https", socketFactory, 443);
		Protocol.registerProtocol("https", https);
		
		
		//     2. Create an instance of one of the methods (PostMethod in this case). The URL to connect to is passed in to the
		//        the method constructor.  
		EntityEnclosingMethod postMethod = new PostMethod("https://" + DomainName + ":8443/xTAS-core/services/");

		//add the xml body
		RequestEntity postBody = new StringRequestEntity("<application/>");
		postMethod.setRequestEntity(postBody);
		
		//	   3. Tell HttpClient to execute the method.
		try {
			client.executeMethod(postMethod);
		} catch (HttpException e) {
			e.printStackTrace();
		}
		catch (IOException e) {
			e.printStackTrace();
		}
		
		//	   4. Read the response.
		String responseBody = null;
		try {
			responseBody = postMethod.getResponseBodyAsString();
		} catch (IOException e) {
			e.printStackTrace();
		}
		
		//	   5. Release the connection.
		postMethod.releaseConnection();
		
		//	   6. Deal with the response.
		System.out.println(responseBody);
		postMethod.releaseConnection();
		
	}

}

I am trying to code it in version 4 which is:

import java.io.IOException;
import java.net.InetSocketAddress;
import java.security.GeneralSecurityException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.params.BasicHttpParams;
import org.apache.http.params.CoreConnectionPNames;
import org.apache.http.params.HttpParams;
import org.apache.http.util.EntityUtils;


public class post {

    
    public static void main(String[] args) {
        SSLSocketFactory sf = null;
        try {
            /////////////////////////////////////////////////////////////////////////////////////////////////////////////////
            ///////////////THIS SECTION CONTAINS VARIABLES THAT ARE TO BE MODIFIED FOR YOUR PARTICULAR INSTANCE//////////////
            String DomainName = "SnsServer.someCompanny.com";//enter the domain name of your SnS
            String usernameOfApiCaller = "username";//enter the username of the user making an API call
            String passwordOfApiCaller = "password";//enter the above user's password
            /////////////////////////////////////////////////////////////////////////////////////////////////////////////////
            //	   1.  Create an instance of HttpClient.
            DefaultHttpClient httpClient = new DefaultHttpClient();
            //authentication
            
            TrustManager easyTrustManager = new X509TrustManager() {

                @Override
                public void checkClientTrusted(
                        X509Certificate[] chain,
                        String authType) throws CertificateException {
                    // Oh, I am easy!
                }

                @Override
                public void checkServerTrusted(
                        X509Certificate[] chain,
                        String authType) throws CertificateException {
                    // Oh, I am easy!
                }

                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            };

            SSLContext sslcontext = SSLContext.getInstance("TLS");
            sslcontext.init(null, new TrustManager[]{easyTrustManager}, null);

            sf = new SSLSocketFactory(sslcontext);
            SSLSocket socket = (SSLSocket) sf.createSocket(null);

            socket.setEnabledCipherSuites(new String[]{"SSL_RSA_WITH_RC4_128_MD5"});
            HttpParams params = new BasicHttpParams();
            params.setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT, 1000);
            InetSocketAddress address = new InetSocketAddress("SnsServer.someCompanny.com", 8443);
            sf.connectSocket(socket, address, null, params);

             
            Scheme https = new Scheme("https", 8443, sf);

            SchemeRegistry sr = new SchemeRegistry();
            sr.register(https);
           
            HttpPost httpPost = new HttpPost("https://SnsServer.someCompanny.com:8443/xTAS-core/services/");

            //add the xml body
            StringEntity postBody = new StringEntity("<application/>");
             
            httpPost.setEntity(postBody);
            //	   3. Tell HttpClient to execute the method.
            HttpResponse response = null;
            try {
                response = httpClient.execute(httpPost);
            } catch (Exception e) {
                e.printStackTrace();
            }
            //	   4. Read the response.
            String responseBody = null;
            try {
                HttpEntity entity = response.getEntity();

                System.out.println(EntityUtils.toString(entity));

              
            } catch (IOException e) {
                e.printStackTrace();
            }
            //	   5. Release the connection.
            httpPost.abort();
            //	   6. Deal with the response.

        } catch (GeneralSecurityException ex) {
            Logger.getLogger(PostMain.class.getName()).log(Level.SEVERE, null, ex);
        } catch (IOException ex) {
            Logger.getLogger(PostMain.class.getName()).log(Level.SEVERE, null, ex);
        } finally {
            //sf..close();
        }

    }
}

But the error I am getting is:

javax.net.ssl.SSLException: hostname in certificate didn't match: <SnsServer.someCompanny.com/192.168.1.32> != <SnsServer.someCompanny.com>

Can you help? Thanks

[Andrea Paolo Ferraresi]

this code should be what you are looking for


package fitlibrary.ws.client;

import java.security.KeyStore;

import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager;
import org.apache.http.params.BasicHttpParams;
import org.apache.http.params.HttpParams;
import org.apache.http.params.HttpProtocolParams;
import org.apache.http.protocol.HTTP;

public class RelaxedHttpClient {
public static HttpClient create() {
try {
KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
trustStore.load(null, null);

SSLSocketFactory sf = new RelaxedSSLSocketFactory(trustStore);
sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

HttpParams params = new BasicHttpParams();
HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);

SchemeRegistry registry = new SchemeRegistry();
registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
registry.register(new Scheme("https", sf, 443));

ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);

return new DefaultHttpClient(ccm, params);
} catch (Exception e) {
return new DefaultHttpClient();
}
}
}




package fitlibrary.ws.client;

import java.io.IOException;
import java.net.Socket;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.conn.ssl.SSLSocketFactory;

public class RelaxedSSLSocketFactory extends SSLSocketFactory {
SSLContext sslContext = SSLContext.getInstance("TLS");

public RelaxedSSLSocketFactory(KeyStore truststore) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
super(truststore);

TrustManager tm = new X509TrustManager() {
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
// Do nothing
}

public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
// Do nothing
}

public X509Certificate[] getAcceptedIssuers() {
return null;
}
};

sslContext.init(null, new TrustManager[] { tm }, null);
}

@Override
public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException, UnknownHostException {
return sslContext.getSocketFactory().createSocket(socket, host, port, autoClose);
}

@Override
public Socket createSocket() throws IOException {
return sslContext.getSocketFactory().createSocket();
}
}