No Name Matching Localhost Found Error : Tomcat and CAS Configuration

最新推荐文章于 2025-03-20 17:08:58 发布

软件标兵

最新推荐文章于 2025-03-20 17:08:58 发布

阅读量3.3k

点赞数 1

分类专栏：编程技术

编程技术专栏收录该内容

14 篇文章

订阅专栏

本文介绍了解决因本地证书不匹配而导致的SSL握手异常的方法。通过创建密钥库并配置Tomcat启用SSL，再将本地证书导入Java环境，使得能够顺利连接到HTTPS服务。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching localhost found This error occurs when we try to connect to https enabled web service using standalone java program for localhost configuration. This Post provides the solution by adding javax.net.ssl.HostnameVerifier in the java program. But , sometimes we can not change the code because of third party code restriction . For example , setting up and configuring CAS . CAS also uses http client to connect to the CAS server war application deployed on server. To overcome this problem , we can import the certificate for localhost in our java environment by following these simple steps : First of all , create a keystore by using keytool present in your $JDK_HOME/bin directory.

keytool -genkey -alias tomcat -keystore ./keystore -keyalg RSA

Enter keystore password:
Re-enter new password:
What is your first and last name?
  [Unknown]:  localhost
What is the name of your organizational unit?
  [Unknown]:  localhost
What is the name of your organization?
  [Unknown]:  localhost
What is the name of your City or Locality?
  [Unknown]:  localhost
What is the name of your State or Province?
  [Unknown]:  localhost
What is the two-letter country code for this unit?
  [Unknown]:  in
Is CN=localhost, OU=localhost, O=localhost, L=localhost, ST=localhost, C=in correct?
  [no]:  yes

make sure you enter localhost for first name and last name . Now copy the generated key to tomcat home directory and configure the tomcat to enable SSL like this :

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
 maxThreads="150" scheme="https" secure="true" keystoreFile="keystore" keystorePass="changeit"
               clientAuth="false" sslProtocol="TLS" />

Now restart tomcat and you should be able to access https on https://localhost:8443 Now export the certificate of this localhost:8443 to disk using your browser.(In mozilla you will find option to export in certificate viewer tab ) Now use the keytool in your jdk to import this certificate in your jvm certificates.

keytool -importcert -alias tomcat -file ${PATH_WHERE_CERT_IS_EXPORTED} -keystore $JDK_HOME\jre\lib\security\cacerts

That's it . Now you can run your standalone java program without modifying it. Post your comments and Suggestions !!