Hi Tommy,

I've successfully implemented my own SSLmanager via re-configure SSLContext.

SSLContext context = SSLContext.getInstance("SSL");
context.init(kms, tms, new java.security.SecureRandom());
SSLSocketFactory sf = context.getSocketFactory();
sslsocket = (SSLSocket)sf.createSocket(host, port);

But when I try to export the native data of a private key, I got this kind of exception.
Failed to get private key:
com.pheox.jcapi.JCAPIJNIRuntimeException: Exception raised in JCAPI.DLL:
JCAPIKeyStore_getKey() - Could not get private key blob length.
Bad UID.

Many thanks for your suggestion.

Best Regards
Joyce

Hi Tommy,

According to your suggestion, I tried to construct my own SSL manager. But it can not be successfully executed.

First, I replaced the SSL manager classes which packaged in JCAPISSLplugin.jar. It caused the error 'fail to load plugin'.

Second, I tried to place my new SSL manager classes ahead of JCAPISSLplugin.jar in classpath setting.
But happened to another error:
java.lang.SecurityException: class "com.pheox.jcapi.plugins.ssl.SSLKeyManager"'s signer information does not match signer information of other classes in the same package

How can I implement my own SSL manager?

I can list either private certification or trust certification by using the example code 'ListAllCerts'

But I always happen to an error when trying to startHandshake
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Untrusted certificate chain.

Here's my code
SSLSocketFactory sf = f.getSSLSocketFactory(privateKeyAlias, trustKeyAlias, "SSL");
sslsocket = (SSLSocket)sf.createSocket(host, port);
sslsocket.startHandshake();

Please give some help.