What Java HTTPS server (which is not a servlet container) should I use to develop an application which needs to access SSLSocket?Simple Java HTTPS serverHow do I access the SSLSocket used for a servlet request within the body of the doPost( method?What issues should be considered when overriding equals and hashCode in Java?What does the Java assert keyword do, and when should it be used?Which @NotNull Java annotation should I use?What is Java Servlet?Netty based server in servlet containerFTP over SSL/TLS using Oracle JSSEHTTP Tunnel Servlet (Java)Dealing with “Xerces hell” in Java/Maven?Which framework/lib can help me with rapid development Proxy server on java?How do I access the SSLSocket used for a servlet request within the body of the doPost( method?
What's the difference between 'rename' and 'mv'?
Western buddy movie with a supernatural twist where a woman turns into an eagle at the end
What is the word for reserving something for yourself before others do?
How do conventional missiles fly?
Do I have a twin with permutated remainders?
What to put in ESTA if staying in US for a few days before going on to Canada
Today is the Center
Can I use a neutral wire from another outlet to repair a broken neutral?
prove that the matrix A is diagonalizable
Is "remove commented out code" correct English?
Withdrawals from HSA
Why is the ratio of two extensive quantities always intensive?
Can one be a co-translator of a book, if he does not know the language that the book is translated into?
Is it possible to create light that imparts a greater proportion of its energy as momentum rather than heat?
What reasons are there for a Capitalist to oppose a 100% inheritance tax?
Stopping power of mountain vs road bike
Took a trip to a parallel universe, need help deciphering
Is it legal for company to use my work email to pretend I still work there?
How can saying a song's name be a copyright violation?
UK: Is there precedent for the governments e-petition site changing the direction of a government decision?
Why does Kotter return in Welcome Back Kotter
Increase size of symbol intercal when in superscript position
Is the Joker left-handed?
Brothers & sisters
What Java HTTPS server (which is not a servlet container) should I use to develop an application which needs to access SSLSocket?
Simple Java HTTPS serverHow do I access the SSLSocket used for a servlet request within the body of the doPost( method?What issues should be considered when overriding equals and hashCode in Java?What does the Java assert keyword do, and when should it be used?Which @NotNull Java annotation should I use?What is Java Servlet?Netty based server in servlet containerFTP over SSL/TLS using Oracle JSSEHTTP Tunnel Servlet (Java)Dealing with “Xerces hell” in Java/Maven?Which framework/lib can help me with rapid development Proxy server on java?How do I access the SSLSocket used for a servlet request within the body of the doPost( method?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
What HTTPS server should I use that meets the following requirements:
- The HTTPS server is written in Java.
- The server will allow me to develop a web application.
- The server will allow the web application code to access the SSLSocket for connection in a standard and documented way (not reflection or a private API).
- The server is not a servlet container because the Servlet Specification does not allow access to SSLSocket in a standardized way per How do I access the SSLSocket used for a servlet request within the body of the doPost( method? .
- The server provides as much servlet container-like functionality as possible to simplify development.
- The server is well-maintained and actively supported.
- The server is hopefully open source or freeware.
I have looked at servlet containers such as Tomcat but according to the servlet specification, they do not meet requirement #3. I have looked at Netty but it looks like it is overkill, too low level, and unnecessarily complex for what I am doing. I have looked at com.sun.net.httpserver.HttpsServer but it is not officially supported or maintained or standardized and Oracle could remove it at any moment.
You may be curious as to why I need to do this. I need to access channel binding information associated with the connection. Yes, I am aware that channel binding support is not currently standardized in the JSSE specification and as a result is not supported by the default Oracle-provided JSSE provider. That is why I am using the Bouncy Castle JSSE provider which does support channel binding.
java https server jsse sslsocketfactory
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
add a comment |
What HTTPS server should I use that meets the following requirements:
- The HTTPS server is written in Java.
- The server will allow me to develop a web application.
- The server will allow the web application code to access the SSLSocket for connection in a standard and documented way (not reflection or a private API).
- The server is not a servlet container because the Servlet Specification does not allow access to SSLSocket in a standardized way per How do I access the SSLSocket used for a servlet request within the body of the doPost( method? .
- The server provides as much servlet container-like functionality as possible to simplify development.
- The server is well-maintained and actively supported.
- The server is hopefully open source or freeware.
I have looked at servlet containers such as Tomcat but according to the servlet specification, they do not meet requirement #3. I have looked at Netty but it looks like it is overkill, too low level, and unnecessarily complex for what I am doing. I have looked at com.sun.net.httpserver.HttpsServer but it is not officially supported or maintained or standardized and Oracle could remove it at any moment.
You may be curious as to why I need to do this. I need to access channel binding information associated with the connection. Yes, I am aware that channel binding support is not currently standardized in the JSSE specification and as a result is not supported by the default Oracle-provided JSSE provider. That is why I am using the Bouncy Castle JSSE provider which does support channel binding.
java https server jsse sslsocketfactory
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
com.sun.net.httpserver.HttpsServeris indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.
– user207421
Mar 8 at 0:00
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20
add a comment |
What HTTPS server should I use that meets the following requirements:
- The HTTPS server is written in Java.
- The server will allow me to develop a web application.
- The server will allow the web application code to access the SSLSocket for connection in a standard and documented way (not reflection or a private API).
- The server is not a servlet container because the Servlet Specification does not allow access to SSLSocket in a standardized way per How do I access the SSLSocket used for a servlet request within the body of the doPost( method? .
- The server provides as much servlet container-like functionality as possible to simplify development.
- The server is well-maintained and actively supported.
- The server is hopefully open source or freeware.
I have looked at servlet containers such as Tomcat but according to the servlet specification, they do not meet requirement #3. I have looked at Netty but it looks like it is overkill, too low level, and unnecessarily complex for what I am doing. I have looked at com.sun.net.httpserver.HttpsServer but it is not officially supported or maintained or standardized and Oracle could remove it at any moment.
You may be curious as to why I need to do this. I need to access channel binding information associated with the connection. Yes, I am aware that channel binding support is not currently standardized in the JSSE specification and as a result is not supported by the default Oracle-provided JSSE provider. That is why I am using the Bouncy Castle JSSE provider which does support channel binding.
java https server jsse sslsocketfactory
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
What HTTPS server should I use that meets the following requirements:
- The HTTPS server is written in Java.
- The server will allow me to develop a web application.
- The server will allow the web application code to access the SSLSocket for connection in a standard and documented way (not reflection or a private API).
- The server is not a servlet container because the Servlet Specification does not allow access to SSLSocket in a standardized way per How do I access the SSLSocket used for a servlet request within the body of the doPost( method? .
- The server provides as much servlet container-like functionality as possible to simplify development.
- The server is well-maintained and actively supported.
- The server is hopefully open source or freeware.
I have looked at servlet containers such as Tomcat but according to the servlet specification, they do not meet requirement #3. I have looked at Netty but it looks like it is overkill, too low level, and unnecessarily complex for what I am doing. I have looked at com.sun.net.httpserver.HttpsServer but it is not officially supported or maintained or standardized and Oracle could remove it at any moment.
You may be curious as to why I need to do this. I need to access channel binding information associated with the connection. Yes, I am aware that channel binding support is not currently standardized in the JSSE specification and as a result is not supported by the default Oracle-provided JSSE provider. That is why I am using the Bouncy Castle JSSE provider which does support channel binding.
java https server jsse sslsocketfactory
java https server jsse sslsocketfactory
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
asked Mar 7 at 23:54
rossmpersonalrossmpersonal
103
103
com.sun.net.httpserver.HttpsServeris indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.
– user207421
Mar 8 at 0:00
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20
add a comment |
com.sun.net.httpserver.HttpsServeris indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.
– user207421
Mar 8 at 0:00
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20
com.sun.net.httpserver.HttpsServer is indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.– user207421
Mar 8 at 0:00
com.sun.net.httpserver.HttpsServer is indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.– user207421
Mar 8 at 0:00
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55054687%2fwhat-java-https-server-which-is-not-a-servlet-container-should-i-use-to-develo%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55054687%2fwhat-java-https-server-which-is-not-a-servlet-container-should-i-use-to-develo%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
com.sun.net.httpserver.HttpsServeris indeed standardized here. It is indeed supported, and maintained, and Oracle cannot 'remove it at any moment'. Off topic.– user207421
Mar 8 at 0:00
@user207421 That is not true. See the second answer at stackoverflow.com/questions/2308479/simple-java-https-server . It is not part of the Java standard. It is currently part of the Oracle/Sun JDK and could be removed at any moment. That answer recommended JLHTTP but the post is over three out so the answer may be outdated. Why is my question off-topic?
– rossmpersonal
Mar 8 at 2:27
That answer does not say it is unsupported, unmaintained, or can be removed at any moment, and you should note that the author is flogging his own wares. It is a documented part of the Oracle JVM.
– user207421
Mar 8 at 4:38
@user207421 Per docs.oracle.com/en/java/javase/11/docs/api/index.html#JDK , "The Java Development Kit (JDK) APIs are specific to the JDK and will not necessarily be available in all implementations of the Java SE Platform." Module jdk.httpserver is specific to the JDK. Per docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/… , com.sun.net.httpserver.HttpsServer is part of module jdk.httpserver so it is JDK-specific. Therefore, com.sun.net.httpserver.HttpsServer is not standardized in the Java SE Platform API standard.
– rossmpersonal
Mar 8 at 20:20