On Wed, Apr 06, 2022 at 12:03:44AM +0000, Fan, Jan-fon wrote:
> Hi,
> I am using Axis2/C 1.6.0 to create a web service client. It is working with 
> regular IIS hosted web services but failing to access HTTPS enabled web 
> services.
> I am wondering if 1.6.0 supports HTTPS client or not. If it supports, can 
> anyone provide me an example code?

HTTPS does work with 1.6.0 - I've been using it that way for 10 or 12
years now.  Unfortunately, I'm not able to share working code, as
it's my employer's.  However, the documentation [1] lists the config changes
needed and certificate requirements.

Something else you may need to consider is that 1.6.0 was written
against an older version of OpenSSL, and does not compile against the
current versions without changes.  Depending on the version of TLS
required by the server, the older OpenSSL may not be able to talk to it.
You might be able to get around this by changing your server
configuration to allow older TLS versions (though this is potentially
less secure).

It would be helpful to know the error you're getting, or at least
whether it's an SSL error, or some other error.


There has been some SSL-related work done on the code base since the
1.6.0 release, including the fixing of several SSL-related bugs, as well
as updating Axis2/C to compile against newer versions of OpenSSL,  but
these have not yet been backported to the 1.6 branch.

It might be worth trying the current master branch to see if it fixes
your problem.  If it does, then you could probably backport the
SSL-related patches.


> 
> Does anyone know when 1.7.0 will be available?

Unfortunately I don't currently have an ETA for a 1.7.0 release.  It
might be this year, or it might not.  There's still a lot to fix, and
not a lot of people willing to test.

I've been in discussion with some other users about the possibility of a
1.6.1 release that would fix a few key bugs and backport support for
newer OpenSSL versions, but I haven't had time to complete the work.  If
this does happen, then it could at least be a step forward, even if 1.7
isn't released soon.  (Though I would really like to get 1.7 out
eventually).


Regards,

Bill

[1] https://axis.apache.org/axis2/c/core/docs/axis2c_manual.html#ssl_client



-- 
GPG: 5CDD 0C9C F446 BC1B 2509  8791 1762 E022 7034 CF84

---------------------------------------------------------------------
To unsubscribe, e-mail: c-user-unsubscr...@axis.apache.org
For additional commands, e-mail: c-user-h...@axis.apache.org

Reply via email to