Patches item #1003283, was opened at 2004-08-04 16:03 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=376687&aid=1003283&group_id=22866
Category: JBossServer Group: v3.2 Status: Open Resolution: None Priority: 5 Submitted By: Rolf Arne Corneliussen (rolfarne) Assigned to: Nobody/Anonymous (nobody) Summary: Custom socket factory for https invocation Initial Comment: Problem: We want to use the http-invoker with SSL and Client Certificate Authentication. On the client side, we want to able to control which keystore to get the client certificate from at runtime, the client certificate is not a static system wide setting. Solution: The Util.java class in the org.jboss.invocation.http.interfaces package handles the http(s) connection. We add a configuration option so that it is possible to set a choosen socket factory on the connection. To be more specific,we add an interface SSLSocketFactoryFactory (!) to the org.jboss.invocation.http.interfaces package. This interface has a single method SSLSocketFactory getSocketFactory() throws Exception; A system property, named "org.jboss.security.httpInvoker.sslSocketFactoryF actory" is cheked by Util.java in the static initializer, and if not null, a class with that classname is instantiated. In the invoke method of Util.java, we check if it is an https connection, and if so and we have configured a SSLSocketFactoryFactory, we invoke the getSocketFactory() method an set the returned factory on the https connection. We also provide an implementation of the SSLSocketFactoryFactory interface named DomainSocketFactoryFactory. This is placed in the org.jboss.security.ssl package, and uses the already present DomainSocketFactory. The security domain is looked up in jndi at the fixed name "java:comp/env/security/ssl-domain". It is the responsibility of the deployer to provide a jndi link to the actual security domain. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=376687&aid=1003283&group_id=22866 ------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ JBoss-Development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
