Re: Jetty or CXF Http:Conduit for SSL?

[Bharath]

Hi Reji,

      1)  Try with adding client connection params and conduit name as
*.http-conduit

      2)  Also disableCNCheck should be true.

Here am posting the working conduit config details which i did while doing
some poc 

<http:conduit name="*.http-conduit">
        
        <http-conf:client Connection="Keep-Alive" MaxRetransmits="1"
        AllowChunking="false" ConnectionTimeout="0" ReceiveTimeout="0" />
                      
                <http:tlsClientParameters
                        secureSocketProtocol="SSL" disableCNCheck="true">
                        <sec:keyManagers keyPassword="password">
                                <sec:keyStore type="JKS" password="xxx" 
file="etc/keystore.jks" />
                        </sec:keyManagers>
                        <sec:trustManagers>
                                <sec:keyStore type="JKS" password="xxx" 
file="etc/truststore.jks" />
                        </sec:trustManagers>

                        <sec:cipherSuitesFilter>
                        
<sec:include>TLS_DHE_RSA_WITH_AES_128_CBC_SHA|SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA|TLS_RSA_WITH_AES_128_CBC_SHA|SSL_RSA_WITH_3DES_EDE_CBC_SHA|TLS_DHE_DSS_WITH_AES_128_CBC_SHA|SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA|</sec:include>
                                <sec:exclude>.*_DH_anon_.*</sec:exclude>
                        </sec:cipherSuitesFilter>
                </http:tlsClientParameters>
                
        </http:conduit>

Hope this helps you!!!

Cheers!!!
Bharath



--
View this message in context: 
http://camel.465427.n5.nabble.com/Jetty-or-CXF-Http-Conduit-for-SSL-tp5737876p5737938.html
Sent from the Camel - Users mailing list archive at Nabble.com.