ssl - Java - is it possible to verify a particular "hardcoded" self-signed certificate by fingerprint, and ignore hostname matches? -
this continuation of this question (decided make separate in case in future looking similar problem)
basically, set applet , servlet communicating.
servlet's cert self-signed , hardcoded applet.
now, let's go "make truststore in memory, import hardcoded cert it" route.
problem: servlet's ip/hostname subject change without warning
how 1 go making applet doesn't verify hostname particular cert, still checks other things, such fingerprint , such?
additional considerations:
i'd rather avoid having applet loose ability verify hostnames other certificates.
i'd avoid browser popups , pleads user input when dealing "hardcoded" cert (we put there ourselves, of course trust ^_^)
thank kind help.
hostname checking happens on https. if you're using ssl directly, don't have problem.
Comments
Post a Comment