[arquillian-issues] [JBoss JIRA] (ARQ-687) Support for custom hostname verifiers

[Shajahan Palayil (Created) (JIRA)]

Support for custom hostname verifiers
-------------------------------------

                 Key: ARQ-687
                 URL: https://issues.jboss.org/browse/ARQ-687
             Project: Arquillian
          Issue Type: Feature Request
      Security Level: Public (Everyone can see)
          Components: WebLogic Containers
    Affects Versions: wls_1.0.0.Alpha1
         Environment: Windows XP/Linux Open Suse , Sun JVM
            Reporter: Shajahan Palayil


My organization has a custom TrustKeyStore which has been configured by weblogic start parameter as below.

weblogic.security.SSL.ignoreHostnameVerifictaion=false
weblogic.security.SS.hostNameVerifier='custom built class name goes here'
weblogic.security.TrustKeyStore=CustomTrust
weblogic.security.CustomTrustKeyStoreFileName='location of the .properties file here'
weblogic.security.CustomTrustKeyStorePassPhrase='pass phrase here'
weblogic.security.CustomTrustKeyStoreType='TYPE goes here'

I tried JSFUnit with Arquillian on normal weblogic server (downloaded and installed from Oracle) and its working great. But when I try to run it on organization provided weblogic env, it fails with error on client side with message, "Certificate chain received from localhost was not trusted causing SSL handshake failure etc..etc.." and on server console the error message is BAD_CERTIFICATE alert was received from localhost etc..etc..
The configuration is as below.

 <container qualifier="wls-ssl-demotrust" default="true">
        <configuration>
            <property name="adminUrl">t3s://localhost:9998</property>
            <property name="adminUserName">weblogic</property>
            <property name="adminPassword">weblogic</property>
            <property name="target">admin_server_name</property>
            <property name="wlsHome">HOME DIRECTORY HERE</property>           
             <property name="useCustomTrust">true</property>
            <property name="trustStoreLocation">location of the .properties file here</property>
            <property name="trustStorePassword">pass phrase here</property>
        </configuration>
    </container>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira