On 2023/09/12 14:35:08 Torsten Krah wrote:
> Am Dienstag, dem 12.09.2023 um 14:21 +0000 schrieb Michael Osipov:
> > PHA is not implemented in SunJSSE.
> 
> Yeah, I found https://bugs.openjdk.org/browse/JDK-8206923 -
> unfortunately  no progress on that ticket so far - but I hade hope that
> HttpComponents brought its own impl which I could opt-in to use.

How, did you expect us to write an custom JSSE provider?

> > Good luck!
> 
> Imho that means out of luck here, so the workaround is to force TLS 1.2
> for the client connection, instead of TLS 1.3, where the mutual
> authentication topic is still working from a user perspective (although
> handled differently in the protocol and not via PHA).

Yes, that is the best option for now.

> Nevertheless, thanks for the confirming, that it is unsupported in
> HttpComponents.

That is not correct. It would be unsupported if the underlying API would 
support it, but we would not expose it. Here, it is simply impossible.

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscr...@hc.apache.org
For additional commands, e-mail: httpclient-users-h...@hc.apache.org

Reply via email to