Saturday, February 27, 2010

How to stop jboss doing the domian verification

How to stop jboss doing the domian verification

The problem:

This VPN uses two-way SSL to authorise a connection between the client and the server. Our issue was that although the thrid party has created an SSL certificate using the ssl.xxxxx.com.au domain, we were required to use a private IP to call the webservice instead of ssl.xxxxx.com.au. We found that the handshake fails becuase JBOSS is unable to complete domain verification for SSL authorisation and drops the connection as a result. On a consultant's advice we attempted to switch off this verification option in JBOSS without success (possible in Weblogic though, weblogic has the option to switch off the domian look up)

Solution:
To fix the issue, I added the host name (ssl.xxxxx.com.au) to the windows host file of the IP that we were required to call.

http://en.wikipedia.org/wiki/Hosts_file

JBOSS recognises the domain look up as a match and authorises/maintains a stable connection.

No comments:

Post a Comment