You are viewing a plain text version of this content. The canonical link for it is here.
Posted to soap-user@ws.apache.org by Steve D George <st...@uk.ibm.com> on 2003/12/02 12:29:10 UTC

Current situation with SOAP over SSL




Hi, I last used Apache SOAP over SSL in early 2002. At the time, I remember
having to use patched versions of HTTPUtils and SSLUtils to allow SSL
through a proxy and I also had to use a SOAP transport class that supported
HTTPS since I don't think that SOAPHTTPConnection did at the time.

There are a whole host of posts on using SOAP over SSL on the mail archive
but I'd like to get an indication of what the current situation is with the
latest version 2.3.1 of SOAP. I see that the SSL through a proxy bug was
fixed in version 2.3 but what about the need to use a SOAP transport that
supports HTTPS. Does SOAPHTTPConnection now support this?

If I have an application that successfully connects with a web service over
HTTP, assuming that I enable access to that service over SSL on the server,
is it just a matter of changing the target URL of the service to https://
and then configuring JSSE in my client app?

Thanks,

Steve.


Re: Current situation with SOAP over SSL

Posted by Scott Nichol <sn...@scottnichol.com>.
2.3.1 supports non-authenticating proxies for https using SOAPHTTPConnection.  The nightly build supports authenticating proxies (basic auth) as well.

Scott Nichol

Do not send e-mail directly to this e-mail address,
because it is filtered to accept only mail from
specific mail lists.
----- Original Message ----- 
From: "Steve D George" <st...@uk.ibm.com>
To: <so...@ws.apache.org>
Sent: Tuesday, December 02, 2003 6:29 AM
Subject: Current situation with SOAP over SSL


> 
> 
> 
> 
> Hi, I last used Apache SOAP over SSL in early 2002. At the time, I remember
> having to use patched versions of HTTPUtils and SSLUtils to allow SSL
> through a proxy and I also had to use a SOAP transport class that supported
> HTTPS since I don't think that SOAPHTTPConnection did at the time.
> 
> There are a whole host of posts on using SOAP over SSL on the mail archive
> but I'd like to get an indication of what the current situation is with the
> latest version 2.3.1 of SOAP. I see that the SSL through a proxy bug was
> fixed in version 2.3 but what about the need to use a SOAP transport that
> supports HTTPS. Does SOAPHTTPConnection now support this?
> 
> If I have an application that successfully connects with a web service over
> HTTP, assuming that I enable access to that service over SSL on the server,
> is it just a matter of changing the target URL of the service to https://
> and then configuring JSSE in my client app?
> 
> Thanks,
> 
> Steve.
> 
>