RFR: 8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...

GennadiyKrivoshein duke at openjdk.org
Fri Oct 3 12:07:21 UTC 2025


This is the fix for the https://bugs.openjdk.org/browse/JDK-8020207, JConsole fails connecting over SSL using a string with a JMXServiceURL.

The cause of the issue is a connection to the RMI registry. If the registry and agent use SSLSockets and JConsole is trying to connect to the agent using "service:jmx:rmi..." URL, ProxyClient of the JConsole does not attempt to use SSL for communication with the registry, it always tries to connect using not secured Socket.

I would suggest to parse the JMXServiceURL and check the SSL config for the RMI registry for one specific case:

-  the schema of the JMXServiceURL is "rmi"
-  the path of the JMXServiceURL is "/jndi/"
-  the schema of the RMI registry URI is "rmi"
-  the path of the RMI registry URI is "/jmxrmi".

-------------

Commit messages:
 - Allow connection to the RMI registry protected by SSL/TLS using the URL

Changes: https://git.openjdk.org/jdk/pull/27622/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=27622&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8020207
  Stats: 20 lines in 1 file changed: 18 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk/pull/27622.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27622/head:pull/27622

PR: https://git.openjdk.org/jdk/pull/27622


More information about the serviceability-dev mailing list