From: Ashutosh S. <ash...@gm...> - 2014-05-28 19:42:15
|
I am using htmlunit for setting up data into the user's profile at one of the website. In my code: webClient.getOptions().setUseInsecureSSL(false); And also using the certificate from the provider like this: System.setProperty("javax.net.ssl.trustStore", "C:\\Program Files\\OracleJDK16_30b64\\jre\\lib\\security\\cacerts"); System.setProperty("javax.net.ssl.trustStorePassword", "changeit"); //setup certURL webClient.getOptions().setSSLClientCertificate(certURL, "changeit", "JKS");//"jks" or "pkcs12". I just want one way authentication when i am sending the data to setup in the user's profile.So from my webserver to the target site - the data that is being tranversed is sage. How secure is this approach? Can Man in the middle and eavesdropping kind of attack can happen enroute? I dont want the user profile related data that is submitted from my application to be compromised. I am trying to find that out. I am going to use this behind the company's firewall I am using htmlunit-2.14 with JDK1.6.x I tried http post kind of approach: URL url1 = new URL("some url"); WebRequest request1 = new WebRequest(url1,HttpMethod.POST); HtmlPage pageTwo = webClient.getPage(request1); But this code(HTTP POST) doesn't work with the target website where we need to setup the CC. Any suggestions or pointers? Thanks in advance. -- With best Regards: Ashutosh Sharma |