You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by Sebastian Hauer <ha...@psicode.com> on 2003/05/16 14:24:44 UTC
StrictSSLProtocolSocketFactory
Hi httpclient developers,
I am new to this list and started using http client a few days ago
and I wanted to let you know that I am very pleased with it and its
simple yet flexible API, good job guys.
I would like to contribute some code I have written and I would
appreciate your comments on it. You will find it in the attachment to
this mail. It is a more stricter version of
SSLProtocolSocketFactory which will do host name verification after
it obtained an SSLSocket. This mimics the behavior of Suns
HttpsConnection and should help to prevent man-in-the-middle
attacks.
I hope you will find this code useful and it will find its way into
your code base.
Regards,
Sebastian
Re: StrictSSLProtocolSocketFactory
Posted by Oleg Kalnichevski <o....@dplanet.ch>.
The class has been added to the '*.httpclient.contrib.ssl'. Many thanks,
Sebastian, for contributing it.
Cheers
Oleg
On Sat, 2003-05-17 at 03:28, Sebastian Hauer wrote:
> Hi Oleg,
>
> On Fri, May 16, 2003 at 07:56:53PM +0200, Oleg Kalnichevski wrote:
> > >From the first glance it does looks cool to me. I'll play around with
> > the code a bit and add it to our '*.httpclient.contrib.ssl' package
> > provided you do not mind that it lands there, not in our "official"
> > '*.httpclient.protocol' packages.
>
> Thanks, sounds good to me.
>
> Regards,
> Sebastian
Re: StrictSSLProtocolSocketFactory
Posted by Sebastian Hauer <ha...@psicode.com>.
Hi Oleg,
On Fri, May 16, 2003 at 07:56:53PM +0200, Oleg Kalnichevski wrote:
> >From the first glance it does looks cool to me. I'll play around with
> the code a bit and add it to our '*.httpclient.contrib.ssl' package
> provided you do not mind that it lands there, not in our "official"
> '*.httpclient.protocol' packages.
Thanks, sounds good to me.
Regards,
Sebastian
Re: StrictSSLProtocolSocketFactory
Posted by Oleg Kalnichevski <o....@dplanet.ch>.
Sebastian,
>From the first glance it does looks cool to me. I'll play around with
the code a bit and add it to our '*.httpclient.contrib.ssl' package
provided you do not mind that it lands there, not in our "official"
'*.httpclient.protocol' packages.
Cheers
Oleg
On Fri, 2003-05-16 at 14:24, Sebastian Hauer wrote:
> Hi httpclient developers,
>
> I am new to this list and started using http client a few days ago
> and I wanted to let you know that I am very pleased with it and its
> simple yet flexible API, good job guys.
>
> I would like to contribute some code I have written and I would
> appreciate your comments on it. You will find it in the attachment to
> this mail. It is a more stricter version of
> SSLProtocolSocketFactory which will do host name verification after
> it obtained an SSLSocket. This mimics the behavior of Suns
> HttpsConnection and should help to prevent man-in-the-middle
> attacks.
> I hope you will find this code useful and it will find its way into
> your code base.
>
> Regards,
> Sebastian