Integrated: 8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...
GennadiyKrivoshein
duke at openjdk.org
Tue Oct 21 10:36:23 UTC 2025
On Fri, 3 Oct 2025 12:00:13 GMT, GennadiyKrivoshein <duke at openjdk.org> wrote:
> This is the fix for the https://bugs.openjdk.org/browse/JDK-8020207, JConsole fails connecting over SSL using a string with a JMXServiceURL.
>
> The cause of the issue is a connection to the RMI registry. If the registry and agent use SSLSockets and JConsole is trying to connect to the agent using "service:jmx:rmi..." URL, ProxyClient of the JConsole does not attempt to use SSL for communication with the registry, it always tries to connect using not secured Socket.
>
> I would suggest to parse the JMXServiceURL and check the SSL config for the RMI registry for one specific case:
>
> - the schema of the JMXServiceURL is "rmi"
> - the path of the JMXServiceURL is "/jndi/"
> - the schema of the RMI registry URI is "rmi"
> - the path of the RMI registry URI is "/jmxrmi".
This pull request has now been integrated.
Changeset: ea7186a8
Author: Gennadiy Krivoshein <gennadiy.krivoshein at bell-sw.com>
Committer: Dmitry Chuyko <dchuyko at openjdk.org>
URL: https://git.openjdk.org/jdk/commit/ea7186a87f990346fe6af6d4a36989d87e6f98d1
Stats: 20 lines in 1 file changed: 18 ins; 0 del; 2 mod
8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...
Reviewed-by: kevinw
-------------
PR: https://git.openjdk.org/jdk/pull/27622
More information about the serviceability-dev
mailing list