Perhaps I missed the documentation, but here's my problem:

For our particular use of HttpClient (version 3.1), we'd like to be able
to fetch the peer certificate chain for a particular request.

The obvious place to start is to define our own protocol socket factory.

Having done that, I can see perhaps caching the mapping of host to peer
certificates in the protocol socket factory.  Then, after any given
request, my code can ask the protocol socket factory for the peer
certificates for the domain I just connected to.  This seems more
complicated than it needs to be.  I worry that this gets awkward, how do
I maintain the correctness of the cache.

I think it would make more sense to associate the certificate chain with
the individual request.  I just don't see an obvious way to do that.

Any ideas how best to solve this?

-Eric.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to