On Tue, Jan 23, 2018 at 12:01 PM, Al Grant <bigal...@gmail.com> wrote:

>
>         tmf.init(keyStore);
>

You're re-using the keystore for the TrustManagerFactory. It's better to
put the server CA cert into a separate keystore (truststore) and use this
with TrustManagerFactory instead.


>
>         tlsParams.setDisableCNCheck(true);
>

Remove this line - it should only be set for testing.

I already have a client declared from message signing :
> org.apache.cxf.endpoint.Client client =
> org.apache.cxf.frontend.ClientProxy.getClient(irsiService);
>
> So I am unsure whether to still include : Client client =
> ClientProxy.getClient(port); ?
>

No, you can re-use the first client object instead.

Colm.


>
> Cheers
>
>
>
> --
> Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Reply via email to