[
https://issues.apache.org/jira/browse/MUSE-223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12489711
]
Oliver Waeldrich commented on MUSE-223:
---------------------------------------
Another problem is, that there are two implementations of HttpsUrlConnection,
one in javax.net.ssl and one in com.sun.net.ssl (deprecated). To be backward
compatible we still need to support the deprecated implementation.
Therefore, I think it would be quite useful not to pass the SSLSocketFactory to
MUSE, but allow a client implementation to register a handler with the soap
client, which is called e.g. directly after url.openConnection(); The handler
would have only one method (e.g. public void handle(HttpURLConnection); ) where
an implementation could manipulate the connection object as it prefers.
This would potentially also be a feasible solution for j2ME environments.
> Add capability to specify a SSLSocketFactory for HTTPS based connections in
> SimpleSoapClient.
> ---------------------------------------------------------------------------------------------
>
> Key: MUSE-223
> URL: https://issues.apache.org/jira/browse/MUSE-223
> Project: Muse
> Issue Type: New Feature
> Components: Core Engine - Resource and Capability APIs
> Reporter: Oliver Waeldrich
> Assigned To: Dan Jemiolo
> Fix For: 2.3.0
>
>
> In order to use certificate based client authentication with MUSE we would
> like to specify a
> SSLSocketFactory to be used when communicating with a MUSE server. Even
> though it is
> possible to specify a default SSLSocketFactory (see
> HttpsURLConnection.setDefaultSSLSocketFactory())
> this is not feasible for environments, where e.g. a client needs to
> communicate with multiple
> server instances using different credentials.
> Therefore I would suggest an extension to the SimpleSoapClient to specify a
> SSLSocketFactory for https
> connections and to extend the client's send-functionality as indicated by the
> code below.
> HttpURLConnection connection = (HttpURLConnection)url.openConnection();
> if (connection instanceof HttpsURLConnection)
> if (mySSLSocketFactoryInstance =! null) {
>
> ((HttpsURLConnection)connection).setSSLSocketFactory(mySSLSocketFactoryInstance);
> }
> }
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
