[Quickfixj-users] SSL with QuickFIX/J 1.1.0

[Christian Z. <chr...@re...>]

Hi there,

I'm new to QuickFIX/J, just starting to feel at ease handling some 
simple custom messages. I'm implementing a client side application and 
need to connect to our partner using SSL. Of course, I'd like to use 
JSSE rather than running stunnel, since this is supposed to work fine 
since release 1.1.0.

My question: How can I use the custom trust store that was provided by 
my trading partner?
Usually, with JSSE, it's just a matter of defining two system properties:
- javax.net.ssl.trustStore
- javax.net.ssl.trustStorePassword

Unfortunately, this doesn't seem to work. The handshake fails because 
the server's certificate is not trusted. The root certificate being in 
the trust store, it really looks like my trust store is ignored. Niether 
the documentation nor the source code show any way of setting up a trust 
store in the QuickFIX config file.

I see in the QFJ source code that there is a SimpleTrustManagerFactory. 
I don't really get if that trust manager factory does anything. Half of 
the methods are empty placeholders. Why isn't it just a default 
TrustManagerFactory.getInstance("SunX509") ?

Trying to fix the source code on my own, I then stumbled on a build 
problem. Downloading the source zip file and building the whole 
"release.timestamped" target, it fails on LogUtilsTest:
quickfixj\build.xml:25: The following error occurred while executing 
this line:
quickfixj\build.xml:9: The following error occurred while executing this 
line:
quickfixj\core\build.xml:103: The following error occurred while 
executing this line:
quickfixj\core\build.xml:175: Test quickfix.LogUtilTest failed

Any suggestion on how to use a custom trust store is welcome! Or any 
hint on how to find out what actually failed in the test!

Thanks a lot for any help! Looking forward to contribute where I can.

Best regards,

-- 
*Christian Zapf
Realtime Forex SA
*
48, route des Acacias | 1227 Geneva | Switzerland
Tel: +41 22 827 44 53 | Fax: +41 22 827 44 40

<http://www.realtimeforex.com/> <http://www.realtimeforex.com/>