SSL Client Authentication Test Result

JDK Tutorials - Herong's Tutorial Examples - Version 6.02, by Dr. Herong Yang

JDK Tutorials - Herong's Tutorial Examples

∟SSL Client Authentication Test Result

This section provides the test result of running the SSL server program and the SSL client program. The result shows that the server and the client authenticated each other's identity correctly.

With SslReverseEchoerRevised.java and server.jks prepared on the server side, I am ready to start the server program:

>java -cp . SslReverseEchoerRevised server.jks ServerJKS ServerKey

Server socket class: 
   class com.sun.net.ssl.internal.ssl.SSLServerSocketImpl
   Socket address = 0.0.0.0/0.0.0.0
   Socket port = 8888
   Need client authentication = true
   Want client authentication = false
   Use client mode = false

Now switch to the client side, and run the client program:

>java -cp . SslSocketClientRevised client.jks ClientJKS ClientKey

Socket class: class com.sun.net.ssl.internal.ssl.SSLSocketImpl
   Remote address = localhost/127.0.0.1
   Remote port = 8888
   Local socket address = /127.0.0.1:1418
   Local address = /127.0.0.1
   Local port = 1418
   Need client authentication = false
Session class: class com.sun.net.ssl.internal.ssl.SSLSessionImpl
   Cipher suite = TLS_DHE_DSS_WITH_AES_128_CBC_SHA
   Protocol = TLSv1
   PeerPrincipal = CN=my.server.com,OU=My Unit,O=My Home,L=My City...
   LocalPrincipal = CN=my.client.com,OU=My Unit,O=My Home,L=My Cit...

Welcome to SSL Reverse Echo Server. Please type in some words.
Client authentication is working!
!gnikrow si noitacitnehtua tneilC
.

Looking at the server side again, you will see messages:

Socket class: class com.sun.net.ssl.internal.ssl.SSLSocketImpl
   Remote address = /127.0.0.1
   Remote port = 1418
   Local socket address = /127.0.0.1:8888
   Local address = /127.0.0.1
   Local port = 8888
   Need client authentication = true
Session class: class com.sun.net.ssl.internal.ssl.SSLSessionImpl
   Cipher suite = TLS_DHE_DSS_WITH_AES_128_CBC_SHA
   Protocol = TLSv1
   PeerPrincipal = CN=my.client.com,OU=My Unit,O=My Home,L=My City...
   LocalPrincipal = CN=my.server.com,OU=My Unit,O=My Home,L=My Cit...

Wonderful! Everything worked I expected. Client program authenticated the server's identity ok, and server program authenticated the client's identity ok too.

Last update: 2014.

Table of Contents

About This JDK Tutorial Book

Downloading and Installing JDK 1.8.0 on Windows

Downloading and Installing JDK 1.7.0 on Windows

Downloading and Installing JDK 1.6.2 on Windows

Java Date-Time API

Date, Time and Calendar Classes

Date and Time Object and String Conversion

Number Object and Numeric String Conversion

Locales, Localization Methods and Resource Bundles

Calling and Importing Classes Defined in Unnamed Packages