On Mon, 2005-03-07 at 19:07 -0400, Derek Lohnes wrote: > > I was looking for a jar containing the contrib classes for SSL. Can some > tell me what the intention is for this stuff will it be packaged as part > of the distribution?
Hi Derek, We may eventually consider moving the AuthSSLProtocolSocketFactory <http://svn.apache.org/viewcvs.cgi/jakarta/commons/proper/httpclient/trunk/src/contrib/org/apache/commons/httpclient/contrib/ssl/AuthSSLProtocolSocketFactory.java?view=markup> to HttpClient proper. As to the rest of SSL socket factories in the SSL contrib package, they usually implement a security short-cut or based upon an assumption which may be too application specific and therefore are considered unsafe for general use without a thorough review and modification. > If you want to use it do you need to check it out > of CVS and build it yourself? > This is precisely what we encourage people to do: get the source code, review it carefully, make system specific adjustments. Oleg > > > Thanks > Derek > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
