Integrated: 8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...

GennadiyKrivoshein duke at openjdk.org
Tue Oct 21 10:36:23 UTC 2025


On Fri, 3 Oct 2025 12:00:13 GMT, GennadiyKrivoshein <duke at openjdk.org> wrote:

> This is the fix for the https://bugs.openjdk.org/browse/JDK-8020207, JConsole fails connecting over SSL using a string with a JMXServiceURL.
> 
> The cause of the issue is a connection to the RMI registry. If the registry and agent use SSLSockets and JConsole is trying to connect to the agent using "service:jmx:rmi..." URL, ProxyClient of the JConsole does not attempt to use SSL for communication with the registry, it always tries to connect using not secured Socket.
> 
> I would suggest to parse the JMXServiceURL and check the SSL config for the RMI registry for one specific case:
> 
> -  the schema of the JMXServiceURL is "rmi"
> -  the path of the JMXServiceURL is "/jndi/"
> -  the schema of the RMI registry URI is "rmi"
> -  the path of the RMI registry URI is "/jmxrmi".

This pull request has now been integrated.

Changeset: ea7186a8
Author:    Gennadiy Krivoshein <gennadiy.krivoshein at bell-sw.com>
Committer: Dmitry Chuyko <dchuyko at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/ea7186a87f990346fe6af6d4a36989d87e6f98d1
Stats:     20 lines in 1 file changed: 18 ins; 0 del; 2 mod

8020207: jconsole fails connecting over SSL using service:jmx:rmi://...jndi...

Reviewed-by: kevinw

-------------

PR: https://git.openjdk.org/jdk/pull/27622


More information about the serviceability-dev mailing list