You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Chris Kistner (JIRA)" <ji...@apache.org> on 2015/02/17 22:06:12 UTC
[jira] [Updated] (HTTPASYNC-89) Add SSLContextBuilder for
HttpAsyncClient
[ https://issues.apache.org/jira/browse/HTTPASYNC-89?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chris Kistner updated HTTPASYNC-89:
-----------------------------------
Attachment: ApacheAsyncSSLContextBuilder.java
ApacheAsyncPrivateKeyStrategy.java
> Add SSLContextBuilder for HttpAsyncClient
> -----------------------------------------
>
> Key: HTTPASYNC-89
> URL: https://issues.apache.org/jira/browse/HTTPASYNC-89
> Project: HttpComponents HttpAsyncClient
> Issue Type: Improvement
> Affects Versions: 4.0.2
> Reporter: Chris Kistner
> Priority: Minor
> Labels: SSLContext, SSLEngine, X509ExtendedKeyManager
> Attachments: ApacheAsyncPrivateKeyStrategy.java, ApacheAsyncSSLContextBuilder.java
>
>
> I tried using httpclient-4.3.6's SSLContextBuilder to build a SSLContext, which I then fed to my AsyncHttpClient connection pool.
> It worked just fine for configuring the cipher suites, TLS/SSL protocols and trust stores, however it did not work for the key managers.
> The reason being that it did not implement a key manager that extended X509ExtendedKeyManager.
> As far as I saw the differences between the X509ExtendedKeyManager abstract class and X509KeyManager interface are:
> * X509ExtendedKeyManager (for async [and sync]) takes in SSLEngine as argument for its chooseEngineClientAlias method
> * X509KeyManager (for sync only) takes in Socket as argument for its chooseServerAlias method
> For the while being, I've copied and adjusted the SSLContextBuilder and PrivateKeyStrategy classes to suite my needs for a KeyManager implementation when going async. See the attached files for my copy.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org