Re: SSL and stale check changes

2015-04-01 Thread Oleg Kalnichevski
On Wed, 2015-04-01 at 15:50 +0200, Joan Balagueró wrote: > Hello, > > > > I’ve just installed HC4.4.1 and some methods related to ssl are deprecated. > Concretely this piece of code: > > > >SSLContext sslContext = SSLContexts.custom().useTLS().build(); > >sslContext.init(keyManager

Re: CVE-2014-3577: Test case to verify that versions of httpclient are not affected

2015-04-01 Thread Oleg Kalnichevski
On Wed, 2015-04-01 at 12:47 +0200, Markus Koschany wrote: > Hello, > > I am currently trying to verify for the Debian distribution that > versions of httpclient are or are not affected by the following security > vulnerabilities: > > CVE-2014-3577 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=

SSL and stale check changes

2015-04-01 Thread Joan Balagueró
Hello, I’ve just installed HC4.4.1 and some methods related to ssl are deprecated. Concretely this piece of code: SSLContext sslContext = SSLContexts.custom().useTLS().build(); sslContext.init(keyManagers, null, null); return (new SSLConnectionSocketFactory(sslContext, SSLConn

CVE-2014-3577: Test case to verify that versions of httpclient are not affected

2015-04-01 Thread Markus Koschany
Hello, I am currently trying to verify for the Debian distribution that versions of httpclient are or are not affected by the following security vulnerabilities: CVE-2014-3577 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3577 CVE-2012-6153 https://cve.mitre.org/cgi-bin/cvename.cgi?nam

[ANNOUNCEMENT] HttpComponents Client 4.4.1 GA Released

2015-04-01 Thread Oleg Kalnichevski
The Apache HttpComponents project is pleased to announce 4.4.1 GA release of HttpComponents HttpClient. HttpClient 4.4.1 (GA) is a bug fix release that addresses several issues reported since release 4.4. Users of HttpClient 4.4 are recommended to upgrade. Download -