Getting error "No subject alternative names" when doing secure URL connection

 

 

I believe that, by default, the HTTPS URL classes closely follow the rules laid out for checking server identity in section 3.1 of RFC 2818. I believe the error message you recieve indicates those identity checks fail. In general, if you specify a URL of "https://www.server.net", then the certificate sent back from that server should contain a special field called the "Subject Alternative Name", and furthermore the value of this field should be www.server.net. In lieu of this, it may contain www.server.net in one of the CN fields of the subject name. But please see RFC 2818 for the actual rules. If neither of these is true, I think you receive the error you got.

To see if this is indeed the problem, you can temporarily disable the hostname check by using a custom hostname verifier that always returns true. NOTE: this is just for testing, don't do this in your real application! Here is a small example showing this:
view plain copy to clipboard print ?
  1.         final String TEST_URL="https://www.verisign.com/";   
  2.         URL url = new URL(TEST_URL);   
  3.         HttpsURLConnection httpsCon = (HttpsURLConnection) url.openConnection();   
  4.         httpsCon.setHostnameVerifier(new HostnameVerifier()   
  5.         {         
  6.             public boolean verify(String hostname, SSLSession session)   
  7.             {   
  8.                 return true;   
  9.             }   
  10.         });   
  11.         httpsCon.connect();   
  12.         InputStream is = httpsCon.getInputStream();   
  13.         int nread = 0;   
  14.         byte [] buf = new byte[8192];   
  15.         while ((nread = is.read(buf)) != -1)   
  16.         {   
  17.             System.out.write(buf, 0, nread);   
  18.         }  
Nice to meet you.

Logo
天工造物局

北京人形旗下天工造物具身智能开源社区，聚焦具身天工与慧思开物两大平台

更多推荐

deck.gl TripsLayer 出租车轨迹动画示例实战：从示例运行到着色器原理

TripsLayer 是 deck.gl 中用于渲染**随时间流动的轨迹动画**（如出租车行程、物流路径、迁徙路线）的核心图层。本文以仓库中的最小独立示例 [examples/website/trips](https://link.gitcode.com/i/1442af8f442f4cff39ff546e050fceb5) 为骨架，带你完成从安装依赖、启动应用、理解曼哈顿出租车数据格式，到深入

avatar 天工造物局

Foundry Anvil 中 eth_simulateV1 的 Blob 交易与 Blob Gas 字段规范化：原理、实现与测试验证

本篇技术指南以 [anvil-simulate-blob-transactions.md](https://link.gitcode.com/i/3d2ebe227262de169335eb290af80da8) 这条 changelog 条目为起点，深入剖析 Foundry Anvil 对 `eth_simulateV1` RPC 返回结果中 blob（EIP-4844）交易与 blob gas

avatar 天工造物局

LMCache CLI 实战：用 `lmcache kvcache clear` 管理运行中服务的 KV Cache 状态

本文是一份针对 LMCache 官方 CLI 命令 `lmcache kvcache` 的完整技术指南。该命令用于在**运行中的 LMCache 服务（MP HTTP server）**上管理 KV cache 状态，当前提供 `clear` 子命令，用于清空 L1（CPU 内存）层中缓存的全部 KV 数据。读完本文，你将掌握该命令的完整参数体系、退出码语义、终端/JSON/静默三种输出模式，并能

avatar 天工造物局