You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Glen Mazza (JIRA)" <ji...@apache.org> on 2011/04/20 15:28:06 UTC
[jira] [Commented] (CXF-3463) Allow programmatic injection of
TLSClientParameters, before an HTTPConduit is created.
[ https://issues.apache.org/jira/browse/CXF-3463?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13022113#comment-13022113 ]
Glen Mazza commented on CXF-3463:
---------------------------------
Are you sure you can't already modify the TLSClientParameters? http://fusesource.com/docs/framework/2.2/security/i343422.html
> Allow programmatic injection of TLSClientParameters, before an HTTPConduit is created.
> --------------------------------------------------------------------------------------
>
> Key: CXF-3463
> URL: https://issues.apache.org/jira/browse/CXF-3463
> Project: CXF
> Issue Type: New Feature
> Components: Configuration, Core
> Affects Versions: 2.3.4
> Environment: Embedded jetty and CXF installation, but without using Spring configuration. Connecting to an HTTPS SOAP service.
> Reporter: Peter Schwarz
>
> With programmatic configuration:
> Allow for the creation and injection of a default set of TLSClientParameters to be set, which will be used by all HTTPConduits. This could be accomplished, for example, through a call to
> {{BusFactory.getDefaultBus().setExtension(myDefaultTlsClientParamters, TLSClientParameters.class);}}
> Reason:
> When trying to connect to a SOAP service over HTTPS, the HTTPConduit created only uses the default TLSClientParameters. This causes a connection failure (evidenced by a WSDL parsing exception), if there are any specific requirements needed to make the SSL connection (for example, specific cipher suites).
> This can be worked around by implementing both ConduitInitiatorManager and ConduitInitiator wrappers, which can set the TLSClientParamters as needed before the HTTPConduit is returned for usage. However, this is a bit unwieldy, as well as creates set of classes whose reasons for existence may be unclear to developers not familiar with their creation.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira