[jira] [Closed] (CXF-8211) JAX-RS Client - Failover does not respect truststore settings

["Colm O hEigeartaigh (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CXF-8211?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh closed CXF-8211.
------------------------------------

> JAX-RS Client - Failover does not respect truststore settings
> -------------------------------------------------------------
>
>                 Key: CXF-8211
>                 URL: https://issues.apache.org/jira/browse/CXF-8211
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS Security
>    Affects Versions: 3.2.1
>            Reporter: Stephan Gasser
>            Assignee: Colm O hEigeartaigh
>            Priority: Major
>         Attachments: CXF_att_init_jax_rs_client.java
>
>
> Setup the client for TLS/SSL (use my own truststore)
> Setup the client for Failover
>  * In normal case, the client communicates over TLS/SSL with the server (certificate found in my own truststore)
>  * But in the case of a failover, the client use cacerts (???) and not my own configured truststore (-> SSLHandshakeException)
> If I set the 2 properties 'javax.net.ssl.trustStore' and 'javax.net.ssl.trustStorePassword' to my own truststore the TLS/SSL connection to the failover host works as well.
> But this is not the idea, because I configured my own truststore with TLSClientParameters and TrustManagerFactory (with method init(myOwnTruststore)).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)