ssl - Java - is it possible to verify a particular "hardcoded" self-signed certificate by fingerprint, and ignore hostname matches? -


this continuation of this question (decided make separate in case in future looking similar problem)

basically, set applet , servlet communicating.

servlet's cert self-signed , hardcoded applet.

now, let's go "make truststore in memory, import hardcoded cert it" route.

problem: servlet's ip/hostname subject change without warning

how 1 go making applet doesn't verify hostname particular cert, still checks other things, such fingerprint , such?

additional considerations:

  • i'd rather avoid having applet loose ability verify hostnames other certificates.

  • i'd avoid browser popups , pleads user input when dealing "hardcoded" cert (we put there ourselves, of course trust ^_^)

thank kind help.

hostname checking happens on https. if you're using ssl directly, don't have problem.


Comments

Popular posts from this blog

javascript - backbone.js Collection.add() doesn't `construct` (`initialize`) an object -

php - Get uncommon values from two or more arrays -

Adding duplicate array rows in Php -