title: Difference in dealing with ssl certificate in respect of browser and jvm?
body: <p>This is how browser deals with ssl certificate when connecting to https site</p>
  
  <ol>
  <li><p>When i type <a href="https://myDemoSite.com" rel="nofollow">https://myDemoSite.com</a> in browser , first of all my browser asks for the certificate from myDemoSite.com(due to https), then myDemoSite send that certificate to browser </p></li>
  <li><p>Once browser receives that certificate, browser will check whether it is signed by verified authority or not like verisign </p></li>
  <li><p>If yes from second step,then as third step it checks whether certificate issues has same url which user in browser typed</p></li>
  </ol>
  
  <p>Now i am connecting the https site through java program say HttpsConnectProg1.My question is how the programmei.e HttpsConnectProg1  will deal with this
  certificate issued with https site connection(though certificate issued by this https site is cerified i.e signed by verified authority). </p>
  
  <p><strong>I just tried a small
  programme connecting to https site which issues the certified certificate. I was expected some error like sslhandshake error or some certificate error
  (as i did not add this this certified certificate in $JAVA_HOME\jre\lib\security folder)but to my surprise i did not get any error .</strong></p>
  
  <p><strong>Now important question is does HttpsConnectProg1 checks step 3 done by browser as it is very important step? For your reference here it is</strong> </p>
  
  <pre><code> import java.io.IOException;
   import java.net.MalformedURLException;
   import java.net.URL;
   import java.net.URLConnection;
   import java.util.Properties;
   import javax.net.ssl.HostnameVerifier;
   import javax.net.ssl.HttpsURLConnection;
   import javax.net.ssl.SSLSession;
  
  
   public class ConnectToDemoSite {
  
  /**
   * @param args
   */
  public static void main(String[] args) {
      // TODO Auto-generated method stub
  
      String urlStr = "https://www.myDemoSite.com/demo1/";
      URL url;
      Properties reply = new Properties();
      try {
          url = new URL(urlStr);
          URLConnection conn = url.openConnection();
          if(conn instanceof HttpsURLConnection)
          {
          HttpsURLConnection conn1 = (HttpsURLConnection)url.openConnection();
              conn1.setHostnameVerifier(new HostnameVerifier()  
              {        
                  public boolean verify(String hostname, SSLSession session)  
                  {  
                      return true;  
                  }  
              });  
  
          reply.load(conn1.getInputStream());
          }
          else 
          {
               conn = url.openConnection();
               reply.load(conn.getInputStream());
          }
      } catch (MalformedURLException e) {
         e.printStackTrace();
          e.printStackTrace();
      } catch (IOException e) {
          e.printStackTrace();
      }
      catch (Exception e) {
          e.printStackTrace();
      }
      System.out.println("reply is"+reply);
  
  
  
   }
  
  }
  </code></pre>