Hi Below is the requirement for which i need to get hold of security certificate.
The Requirement: Prior to processing standard Net Connect HTTPS transactions, the Net Connect client must check the certificate on the HTTPS server.
The client must check the following four conditions in order to validate if certificate is valid: 1) The URL in the certificate must match the URL retrieved from ECALS 2) The certificate must be from a valid certificate authority 3) The certificate must not be expired
When i open http connection to HTTPS URL and debug, HttpURLConnection object, i could notice security certificates in the object. I need help in how to get these certificates from HttpConnection InputStream.
I've tried doing:
is = httpcon.getInputStream(); CertificateFactory cf = CertificateFactory.getInstance("X509"); X509Certificate c = (X509Certificate) cf.generateCertificate(is);
but it throws exception "Invalid DER Encoded format".
Not sure how to get hold of certificates at HTTPS server.