Configuring 2way SSL on a REST endpoint in an OSGi container

2016-09-15 Thread Martin Nielsen
Hello everyone. I have a question about using CXF in an OSGi container. More specifically using it via Declarative Services. I need to create a REST endpoint, that is secured by 2way SSL, as well as an interceptor which can read the incomming client certificate after the handshake in order to per

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Chris Lott
Sergey thanks for the many constructive suggestions. In the mean time we punted - bought a multi-name (SAN) certificate. CXF works *perfectly* with that certificate; my trivial Java client pukes :( a neat reversal of the previous situation! > On Sep 15, 2016, at 12:27 PM, Sergey Beryozkin w

Re: SAP Webservice: None of the policy alternatives can be satisfied

2016-09-15 Thread mbeards
Hey Matthew, I recently struggled through getting a CXF client connection working with SAP's generated WSDL files... In the end I was lucky. I was able to get the SAP administrator to update the WSDL. There is a configuration screen in the SAP UI when you export an IDOC interface as a web service

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Sergey Beryozkin
But you can indeed set a custom SSLFactory wrapper easily on HttpConduit TLS properties, get HTTPConduit as shown below and see if that solution works... Sergey On 15/09/16 17:22, Sergey Beryozkin wrote: I've just given it a quick try myself - temporarily updated HttpsURLConnectionFactory igno

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Sergey Beryozkin
I've just given it a quick try myself - temporarily updated HttpsURLConnectionFactory ignore the verifier but I still see no server_name extension in the debug - I've tried jax_rs/basic_http demo with Java 8. Sergey On 15/09/16 16:43, Sergey Beryozkin wrote: Hi On 15/09/16 11:59, Chris Lott

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Sergey Beryozkin
Hi On 15/09/16 11:59, Chris Lott wrote: Thanks Sergey for looking at this. I am using fully qualified domain names in all cases, should've mentioned that. These bug reports at OpenJDK/Sun/Oracle are relevant; the second says they know the problem but there's no resolution; any fix will probab

SAP Webservice: None of the policy alternatives can be satisfied

2016-09-15 Thread MRneedHelp
Hi, i´m new to CXF and trying to connect to a SAP Webservice. I use the newest cxf version 3.1.7. I have the WSDL from the webservice and generated code with wsdl2java. I should update a program from Axis2 to CXF. But when i start the standard client (genarted with wsdl2java) i get a "SOAPFaultEx

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Chris Lott
Thanks Sergey for looking at this. I am using fully qualified domain names in all cases, should've mentioned that. These bug reports at OpenJDK/Sun/Oracle are relevant; the second says they know the problem but there's no resolution; any fix will probably be in v9, not 1.8.: https://

Re: SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-15 Thread Sergey Beryozkin
Hi According to http://stackoverflow.com/questions/35366763/in-java-8-can-httpsurlconnection-be-made-to-send-server-name-indication-sni SNI is sent only if it is a fully qualified name. HTH, Sergey On 14/09/16 22:22, Chris Lott wrote: I'd like to ask about a behavior I see in CXF v 3.0.10 an

Keep-Alive timeout in CXF

2016-09-15 Thread niteshjain132
Hi I'm using cxf 3.0.6. I know that CXF relies on HttpURLConnection - http://java.sun.com/javase/6/docs/technotes/guides/net/http-keepalive.html I want to achieve http connection persistent on CXF endpoint, so i defined system property http.maxConnections = 20, and keep-alive is true, max conne