RFR: 8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...
duke
duke at openjdk.org
Wed Oct 15 16:38:04 UTC 2025
On Fri, 3 Oct 2025 12:00:13 GMT, GennadiyKrivoshein <duke at openjdk.org> wrote:
> This is the fix for the https://bugs.openjdk.org/browse/JDK-8020207, JConsole fails connecting over SSL using a string with a JMXServiceURL.
>
> The cause of the issue is a connection to the RMI registry. If the registry and agent use SSLSockets and JConsole is trying to connect to the agent using "service:jmx:rmi..." URL, ProxyClient of the JConsole does not attempt to use SSL for communication with the registry, it always tries to connect using not secured Socket.
>
> I would suggest to parse the JMXServiceURL and check the SSL config for the RMI registry for one specific case:
>
> - the schema of the JMXServiceURL is "rmi"
> - the path of the JMXServiceURL is "/jndi/"
> - the schema of the RMI registry URI is "rmi"
> - the path of the RMI registry URI is "/jmxrmi".
@GennadiyKrivoshein
Your change (at version 3d84f4667679fba2f52cd5d3594569a19b8f4eb6) is now ready to be sponsored by a Committer.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/27622#issuecomment-3407351054
More information about the serviceability-dev
mailing list