Re: [AsyncWeb] SSL server and client certs

2008-02-10 Thread Sangjin Lee
The way it stands now, AHC takes a javax.net.ssl.SSLContext object as a way
to configure/handle SSL.  While this provides a maximum flexibility (one can
create any type of configuration and trust/key management as he/she sees
fit), perhaps one could use easier steps of providing more standard options
in trust/key management in creating SSLContext.
Thanks,
Sangjin


On Feb 9, 2008 9:58 AM, Jeff Genender [EMAIL PROTECTED] wrote:

 Look in the Trust Factory..that is exactly where you need to look.

 Currently the SSL impl is based on communication and anonymous only (I
 was working on the SSL client cert but got side tracked with my new job).

 You probably should allow for a setter that allow you to set a
 certificate object and, to make things easy on the user, a way to pull
 one from a file and keystore (Im just thing about how to make this API
 as simple as possible).

 The Trust Factory is exactly the area I would recommend adding the
 enhancement.

 Alan...this is awesome stuff...thanks for taking such an interest!

 Jeff

 Alan D. Cabrera wrote:
  I need this.  What will it take for me to add it?  It looks like it I
  need to flesh out that trust factory.
 
 
  Regards,
  Alan



Re: [AsyncWeb] SSL server and client certs

2008-02-09 Thread Jeff Genender
Look in the Trust Factory..that is exactly where you need to look.

Currently the SSL impl is based on communication and anonymous only (I
was working on the SSL client cert but got side tracked with my new job).

You probably should allow for a setter that allow you to set a
certificate object and, to make things easy on the user, a way to pull
one from a file and keystore (Im just thing about how to make this API
as simple as possible).

The Trust Factory is exactly the area I would recommend adding the
enhancement.

Alan...this is awesome stuff...thanks for taking such an interest!

Jeff

Alan D. Cabrera wrote:
 I need this.  What will it take for me to add it?  It looks like it I
 need to flesh out that trust factory.
 
 
 Regards,
 Alan