Re: HTTPS test site?

Attila Szegedi wrote:
> Hi folks,
>
> this is not specifically a Java question, so apologies for a slight
> offtopic.
>
> I'm writing code (in my defense, it _is_ Java :-) ) that communicates
> with a HTTPS service. I'd need to test the exact behaviour in face of
> various security problems, i.e. invalid X.509 certificate, cert not
> signed by known trusted party, expired cert, etc. I'd need to see
> exactly what exceptions are thrown, etc. Do you guys know about some
> test site on the 'net that deliberately exposes invalid certificates
> for testing purposes? Couldn't find anything with Google...
>
> Thanks,
>   Attila.

Don't know of any.  I suppose you could try to set one up yourself.
(Not trivial, I know.)

Only other suggestion I could offer is:  maybe you could use JUnit tests
to fake these exception conditions and test how your code handles them.

HTH,

DR

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com