Hi, With further investigation, I answered to some of my questions. Regards
On Mon, Dec 21, 2015 at 6:52 PM, Philippe Mouawad < philippe.moua...@gmail.com> wrote: > Hello, > Looking at: > > - https://issues.apache.org/jira/browse/HTTPCLIENT-1119 > > > 1/ It is not clear for me how the fix works if commit association is > correct: > > - https://fisheye6.atlassian.com/changelog/httpcomponents?cs=1544769 > > Is the fix about replacing: > > final SSLSocket sock = (SSLSocket) this.socketfactory.createSocket(); > > with : > SocketFactory.getDefault().createSocket(); > 2/ Is the fix only for Java 7 or does it work on Java 8? > > It also works on Java8 > > 3/ Also wondering, I see only SSLConnectionSocketFactory is concerned by > fix, so I suppose that SSLSocketFactory was not fixed ? > So I suppose that upgrading to HC4.5.1 from HC4.2.3 will not fix the issue > unless > SSLSocketFactory is used instead of > SSLConnectionSocketFactory > > No it will not fix the issue, unless SSLSocketFactory is used instead of SSLConnectionSocketFactory. >