Hi forum,
Searching furiously hasn't turned up anything, so here's my problem. I'd like to use Oracle's MSCAPI support for Java in Eclipse to hit a secure website. Here's a simple test I've been doing from the command line:
cat > TestURL.java <<EOT
import java.net.*;
public class TestURL {
public static void main(String[] args) throws Exception {
System.out.println(((HttpURLConnection)new URL(args[0]).openConnection()).getResponseCode());
}
}
EOT
javac TestURL.java
java -Djavax.net.ssl.trustStore=NONE -Djavax.net.ssl.trustStoreType=Windows-ROOT -Djavax.net.ssl.keyStore=NONE -Djavax.net.ssl.keyStoreType=Windows-MY -cp . TestURL some-secure-site-address
# Pin is prompted for here...
# Should report 200
The MSCAPI extension causes a prompt for my PIN, and the connection is made successfully. Notice the javax.net.ssl parameters. My eclipse.ini has these lines at the bottom:
-Djavax.net.ssl.keyStore=NONE
-Djavax.net.ssl.keyStoreType=Windows-MY
-Djavax.net.ssl.trustStore=NONE
-Djavax.net.ssl.trustStoreType=Windows-ROOT
After launching Eclipse, I used VisualVM to verify that these system properties did indeed get set in the JVM. However, trying to connect to our task repository (a JIRA installation) results in a handshake_failure. It seems like Eclipse or one of its plugins is reconfiguring the SSL context. How can I either get Eclipse to obey those SSL settings?
EDIT: After setting javax.net.ssl.{key,trust}StorePassword
java.io.FileNotFoundException: NONE (The system cannot find the file specified)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(FileInputStream.java:120)
at java.io.FileInputStream.<init>(FileInputStream.java:79)
at org.eclipse.mylyn.internal.commons.net.PollingSslProtocolSocketFactory.<init>(PollingSslProtocolSocketFactory.java:72)
at org.eclipse.mylyn.commons.net.WebUtil.<clinit>(WebUtil.java:194)
at org.eclipse.mylyn.internal.tasks.ui.TasksUiPlugin.start(TasksUiPlugin.java:549)
at org.eclipse.osgi.framework.internal.core.BundleContextImpl$1.run(BundleContextImpl.java:711)
[snip]
I looked at an older version at grepcode (I can't post the link since I have <25 posts) and found it tries to use these standard properties itself and chokes on the fact that NONE isn't a valid file. I created a file called "NONE" in Eclipse's home directory and, lo and behold, it works! Now I can use my smart card from within Eclipse, woo hoo!
[Updated on: Fri, 02 March 2012 00:56]
Report message to a moderator
] 
Search
Help
Register
Login
Home
