olegk 2004/12/13 13:58:04
Modified: httpclient/xdocs sslguide.xml
Log:
* AuthSSLProtocolSocketFactory description
* "Known limitations and problems" section amended
Revision Changes Path
1.6 +9 -3 jakarta-commons/httpclient/xdocs/sslguide.xml
Index: sslguide.xml
===================================================================
RCS file: /home/cvs/jakarta-commons/httpclient/xdocs/sslguide.xml,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- sslguide.xml 16 Sep 2004 06:24:43 -0000 1.5
+++ sslguide.xml 13 Dec 2004 21:58:04 -0000 1.6
@@ -202,6 +202,11 @@
<a
href="http://cvs.apache.org/viewcvs/jakarta-commons/httpclient/src/contrib/org/apache/commons/httpclient/contrib/ssl/StrictSSLProtocolSocketFactory.java?rev=HEAD";>
StrictSSLProtocolSocketFactory</a> can be used to create SSL
connections that can optionally perform host name verification in order to help
preventing man-in-the-middle type of attacks.
</li>
+ <li>
+ <a
href="http://cvs.apache.org/viewcvs.cgi/jakarta-commons/httpclient/src/contrib/org/apache/commons/httpclient/contrib/ssl/AuthSSLProtocolSocketFactory.java?rev=HEAD";>
+ AuthSSLProtocolSocketFactory</a> can be used to optionally enforce
mutual client/server authentication. This is the most flexible
+ implementation of a protocol socket factory. It allows for
customization of most, if not all, aspects of the SSL authentication.
+ </li>
</ul>
@@ -272,8 +277,9 @@
"Socket closed" exception).
</p>
<p>
- <strong>Solution:</strong> Make sure that you have all the latest
fix packs applied. HttpClient users
- have reported that IBM Websphere Application Server versions 4.0.6,
5.0.2.2, 5.1 do not exhibit the problem.
+ <strong>Solution:</strong> Make sure that you have all the latest
Websphere fix packs applied and IBMJSSE
+ is at least version 1.0.3. HttpClient users have reported that IBM
Websphere Application Server versions
+ 4.0.6, 5.0.2.2, 5.1.0 and above do not exhibit this problem.
</p>
</li>
</ol>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
