On Wed, Apr 06, 2022 at 12:03:44AM +0000, Fan, Jan-fon wrote: > Hi, > I am using Axis2/C 1.6.0 to create a web service client. It is working with > regular IIS hosted web services but failing to access HTTPS enabled web > services. > I am wondering if 1.6.0 supports HTTPS client or not. If it supports, can > anyone provide me an example code?
HTTPS does work with 1.6.0 - I've been using it that way for 10 or 12 years now. Unfortunately, I'm not able to share working code, as it's my employer's. However, the documentation [1] lists the config changes needed and certificate requirements. Something else you may need to consider is that 1.6.0 was written against an older version of OpenSSL, and does not compile against the current versions without changes. Depending on the version of TLS required by the server, the older OpenSSL may not be able to talk to it. You might be able to get around this by changing your server configuration to allow older TLS versions (though this is potentially less secure). It would be helpful to know the error you're getting, or at least whether it's an SSL error, or some other error. There has been some SSL-related work done on the code base since the 1.6.0 release, including the fixing of several SSL-related bugs, as well as updating Axis2/C to compile against newer versions of OpenSSL, but these have not yet been backported to the 1.6 branch. It might be worth trying the current master branch to see if it fixes your problem. If it does, then you could probably backport the SSL-related patches. > > Does anyone know when 1.7.0 will be available? Unfortunately I don't currently have an ETA for a 1.7.0 release. It might be this year, or it might not. There's still a lot to fix, and not a lot of people willing to test. I've been in discussion with some other users about the possibility of a 1.6.1 release that would fix a few key bugs and backport support for newer OpenSSL versions, but I haven't had time to complete the work. If this does happen, then it could at least be a step forward, even if 1.7 isn't released soon. (Though I would really like to get 1.7 out eventually). Regards, Bill [1] https://axis.apache.org/axis2/c/core/docs/axis2c_manual.html#ssl_client -- GPG: 5CDD 0C9C F446 BC1B 2509 8791 1762 E022 7034 CF84 --------------------------------------------------------------------- To unsubscribe, e-mail: c-user-unsubscr...@axis.apache.org For additional commands, e-mail: c-user-h...@axis.apache.org