java6版本如何禁用,如何禁用java 1.8.181版本的端点标识

When I upgraded java from 1.8.161 to 1.8.181, I am not able to connect to LDAP from my application,

i get below exception when i try to login to application with a user that is active in LDAP.

javax.naming.CommunicationException: : [Root exception is

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException:

No subject alternative names matching IP address found]

I found the below release notes on the Oracle site for version 1.8.181

Changes

core-libs/javax.naming

➜ Improve LDAP support

Endpoint identification has been enabled on LDAPS connections.

To improve the robustness of LDAPS (secure LDAP over TLS ) connections, endpoint identification

algorithms have been enabled by default.

Note that there may be situations where some applications that were previously able to successfully connect

to an LDAPS server may no longer be able to do so.

Such applications may, if they deem appropriate, disable endpoint identification using a

new system property: com.sun.jndi.ldap.object.disableEndpointIdentification.

Define this system property (or set it to true) to disable endpoint identification algorithms.

I tried to set the property to true as below along with other properties. But still it throws same error.

Hashtable env = new Hashtable();

env.put(Context.INITIAL_CONTEXT_FACTORY, ctxFactory);

env.put(Context.PROVIDER_URL, providerUrl);

env.put(Context.SECURITY_PRINCIPAL, secPrincipal);

env.put(Context.SECURITY_AUTHENTICATION, secAuthentication);

env.put(Context.SECURITY_CREDENTIALS, secCredentials);

env.put("com.sun.jndi.ldap.object.disableEndpointIdentification" ,disableEndpointIdentification);

DirContext ldapCtx = new InitialDirContext(env);

Need your help how and where exactly we need to set the property

com.sun.jndi.ldap.object.disableEndpointIdentification to true.

There is no such constant String variable related to this in Context Interface too.

If I revert back to java 1.8.161 version it works fine.

解决方案

doc tells about application system property and not about Ldap context environment

then it needs to be setup on application JVM (java command line) for the app as

-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true