Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6586276

SSLSockets and SSLEngines need a switch to enable hostname validation

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Duplicate
    • P3
    • 7
    • 6u2
    • security-libs
    • None

    Description

      In order to be compliant with RFC 2459, applications should implement hostname checking on SSL connections. The class HttpsURLConnection does this, for example. However, if you are using the lower-level SSLSocket, SSLServerSocket and SSLEngine classes this functionality isn't available, even though it is implemented in the underlying libraries. A mechanism should be provided to enable this existing code so that JSSE clients don't have to reinvent an existing wheel.

      Suggestion: make this flag part of the SSLParameters class and implement RFE 6586274

      Attachments

        Issue Links

          duplicates

          Enhancement - null JDK-6586258 X509ExtendedTrustManager is in the wrong namespace

          • P2 - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Enhancement - null JDK-6586274 SSLSocketFactory and SSLServerSocketFactory can't be configured

          • P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-6766775 X509 certificate hostname checking is broken in JDK1.6.0_10

          • P2 - Crashes, loss of data, severe memory leak.
          • Resolved

          Enhancement - null JDK-6586284 X509KeyManager and X509TrustManager need pre-keystore access callbacks

          • P3 - Major loss of function.
          • Closed

          Activity

            People

              xuelei Xuelei Fan
              alanbur Alan Burlison
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: