RFR: 8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...
GennadiyKrivoshein
duke at openjdk.org
Fri Oct 3 12:07:21 UTC 2025
This is the fix for the https://bugs.openjdk.org/browse/JDK-8020207, JConsole fails connecting over SSL using a string with a JMXServiceURL.
The cause of the issue is a connection to the RMI registry. If the registry and agent use SSLSockets and JConsole is trying to connect to the agent using "service:jmx:rmi..." URL, ProxyClient of the JConsole does not attempt to use SSL for communication with the registry, it always tries to connect using not secured Socket.
I would suggest to parse the JMXServiceURL and check the SSL config for the RMI registry for one specific case:
- the schema of the JMXServiceURL is "rmi"
- the path of the JMXServiceURL is "/jndi/"
- the schema of the RMI registry URI is "rmi"
- the path of the RMI registry URI is "/jmxrmi".
-------------
Commit messages:
- Allow connection to the RMI registry protected by SSL/TLS using the URL
Changes: https://git.openjdk.org/jdk/pull/27622/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=27622&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8020207
Stats: 20 lines in 1 file changed: 18 ins; 0 del; 2 mod
Patch: https://git.openjdk.org/jdk/pull/27622.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/27622/head:pull/27622
PR: https://git.openjdk.org/jdk/pull/27622
More information about the serviceability-dev
mailing list