Example of HTTPS with basic auth using Java generated client library

[Mark Spielman]

Is there an example around of how to use the Java Client generated library to connect with a server over HTTPS still using basic authentication.

I tried simply updating the protocol in my base bath to HTTPS but ended with the following exception:

Exception in thread "main" com.sun.jersey.api.client.ClientHandlerException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present

at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:155)

at com.sun.jersey.api.client.Client.handle(Client.java:652)

at com.sun.jersey.api.client.WebResource.handle(WebResource.java:682)

at com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74)

at com.sun.jersey.api.client.WebResource$Builder.post(WebResource.java:570)

at io.swagger.client.ApiClient.getAPIResponse(ApiClient.java:563)

at io.swagger.client.ApiClient.invokeAPI(ApiClient.java:593)

Thanks

Mark

[wing328]

Please open a ticket via https://github.com/swagger-api/swagger-codegen/issues and we'll look into that.

(from the exception message, it looks like the server has a invalid cert)

Mark Spielman於 2016年4月2日星期六 UTC+8上午3時57分50秒寫道：

[Mark Spielman]

Thank you for the pointer. That was very helpful.  

I am in a test environment and I have investigated further and confirmed that my server is using a self-signed cert. So based on your thoughts, this is likely the root cause of the exception I'm guessing. 

Does anyone have an example of how I can update the ApiClient to accept self signed certificates to allow this to work in my test environment?  I'm guessing I have to explicitly set the http client?

Thanks

Mark

[Mark Spielman]

I have confirmed that is I update the Jersey Client to accept self-signed certificates it works without issue. So thank you for your help.

I used the following as guidance for how to accept self-signed certs.

http://stackoverflow.com/questions/6047996/ignore-self-signed-ssl-cert-using-jersey-client

Cheers,

Mark

[William Cheng]

Glad to hear that you've the issue resolved.

--
You received this message because you are subscribed to a topic in the Google Groups "Swagger" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/swagger-swaggersocket/JSdXHJ2VOqs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to swagger-swaggers...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[wing328]

FYI. Documented in the FAQ: https://github.com/swagger-api/swagger-codegen/wiki/FAQ#using-java-api-client-to-make-request-results-in-ssl-errors-due-to-invalid-certificate-is-there-a-way-to-bypass-that

wing328於 2016年4月4日星期一 UTC+8下午11時35分55秒寫道：

To unsubscribe from this group and all its topics, send an email to swagger-swaggersocket+unsub...@googlegroups.com.