You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Torsten Mielke (JIRA)" <ji...@apache.org> on 2011/08/24 12:19:29 UTC

[jira] [Commented] (CXF-2693) Allow to use HttpsURLConnection's defaultSSLSocketFactory and defaultHostnameVerifier in CXF client

    [ https://issues.apache.org/jira/browse/CXF-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13090129#comment-13090129 ] 

Torsten Mielke commented on CXF-2693:
-------------------------------------

I presume there is a typo in the second attribute name in the initial bug description.
That attribute is surely supposed to be called useHttpsURLConnectionDefaultHostnameVerifier and not useHttpsURLConnectionDefaultSslSocketFactory. 
Perhaps it can be corrected for completeness? 
The SSL docs on Apache are correct.



> Allow to use HttpsURLConnection's defaultSSLSocketFactory and defaultHostnameVerifier in CXF client
> ---------------------------------------------------------------------------------------------------
>
>                 Key: CXF-2693
>                 URL: https://issues.apache.org/jira/browse/CXF-2693
>             Project: CXF
>          Issue Type: New Feature
>          Components: Transports
>    Affects Versions: 2.2.6
>            Reporter: Cyrille Le Clerc
>            Assignee: Cyrille Le Clerc
>             Fix For: 2.2.7, 2.3
>
>         Attachments: CXF-2693-1.patch
>
>
> Allow CXF client (JAXWS & JAXRS) for HTTPS calls to use JVM wide SSL components :  
> * [HttpsURLConnection#getDefaultSSLSocketFactory()|http://java.sun.com/javase/6/docs/api/javax/net/ssl/HttpsURLConnection.html#getDefaultSSLSocketFactory()]
> * [HttpsURLConnection.html.getDefaultHostnameVerifier()|http://java.sun.com/javase/6/docs/api/javax/net/ssl/HttpsURLConnection.html#getDefaultHostnameVerifier()]
> For this, I propose to add the following attributes to {{<http-conf:tlsClientParameters ... />}} :
> || Attribute || Description ||
> | {{useHttpsURLConnectionDefaultSslSocketFactory}} | This attribute specifies if HttpsURLConnection.defaultSslSocketFactory should be used to create https connections. If 'true', 'jsseProvider', 'secureSocketProtocol', 'trustManagers', 'keyManagers', 'secureRandom', 'cipherSuites' and 'cipherSuitesFilter' are ignored.  |
> | {{useHttpsURLConnectionDefaultSslSocketFactory}} | This attribute specifies if HttpsURLConnection.defaultHostnameVerifier should be used to create https connections. If 'true', 'disableCNCheck' is ignored. |

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira