Repository: cxf Updated Branches: refs/heads/3.1.x-fixes e5ba3fefb -> b91bd2354
Fixing transports system test with Jetty upgrade Project: http://git-wip-us.apache.org/repos/asf/cxf/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/b91bd235 Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/b91bd235 Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/b91bd235 Branch: refs/heads/3.1.x-fixes Commit: b91bd2354ec2195bfea0309b24949ee2b04a7ade Parents: e5ba3fe Author: Colm O hEigeartaigh <[email protected]> Authored: Tue Mar 7 15:25:45 2017 +0000 Committer: Colm O hEigeartaigh <[email protected]> Committed: Tue Mar 7 15:26:52 2017 +0000 ---------------------------------------------------------------------- .../org/apache/cxf/https/ssl3/sslv3-server.xml | 16 ++++++++++++++++ .../ciphersuites/ciphersuites-explicit-client.xml | 2 +- .../https/ciphersuites/ciphersuites-server.xml | 5 +++-- 3 files changed, 20 insertions(+), 3 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf/blob/b91bd235/systests/transports-ssl3/src/test/resources/org/apache/cxf/https/ssl3/sslv3-server.xml ---------------------------------------------------------------------- diff --git a/systests/transports-ssl3/src/test/resources/org/apache/cxf/https/ssl3/sslv3-server.xml b/systests/transports-ssl3/src/test/resources/org/apache/cxf/https/ssl3/sslv3-server.xml index 53bfd42..ef202c6 100644 --- a/systests/transports-ssl3/src/test/resources/org/apache/cxf/https/ssl3/sslv3-server.xml +++ b/systests/transports-ssl3/src/test/resources/org/apache/cxf/https/ssl3/sslv3-server.xml @@ -34,6 +34,10 @@ <sec:trustManagers> <sec:keyStore type="jks" password="password" resource="keys/Truststore.jks"/> </sec:trustManagers> + <sec:cipherSuitesFilter> + <sec:include>.*_WITH_AES_.*</sec:include> + <sec:exclude>SSL_RSA_WITH_DES_CBC_SHA</sec:exclude> + </sec:cipherSuitesFilter> <sec:clientAuthentication want="true" required="false"/> </httpj:tlsServerParameters> </httpj:engine> @@ -56,6 +60,10 @@ <sec:trustManagers> <sec:keyStore type="jks" password="password" resource="keys/Truststore.jks"/> </sec:trustManagers> + <sec:cipherSuitesFilter> + <sec:include>.*_WITH_AES_.*</sec:include> + <sec:exclude>SSL_RSA_WITH_DES_CBC_SHA</sec:exclude> + </sec:cipherSuitesFilter> <sec:clientAuthentication want="true" required="false"/> </httpj:tlsServerParameters> </httpj:engine> @@ -85,6 +93,10 @@ <sec:excludeProtocol>TLSv1.1</sec:excludeProtocol> <sec:excludeProtocol>TLSv1.2</sec:excludeProtocol> </sec:excludeProtocols> + <sec:cipherSuitesFilter> + <sec:include>.*_WITH_AES_.*</sec:include> + <sec:exclude>SSL_RSA_WITH_DES_CBC_SHA</sec:exclude> + </sec:cipherSuitesFilter> </httpj:tlsServerParameters> </httpj:engine> </httpj:engine-factory> @@ -111,6 +123,10 @@ <sec:includeProtocol>SSLv3</sec:includeProtocol> <sec:includeProtocol>SSLv2Hello</sec:includeProtocol> </sec:includeProtocols> + <sec:cipherSuitesFilter> + <sec:include>.*_WITH_AES_.*</sec:include> + <sec:exclude>SSL_RSA_WITH_DES_CBC_SHA</sec:exclude> + </sec:cipherSuitesFilter> </httpj:tlsServerParameters> </httpj:engine> </httpj:engine-factory> http://git-wip-us.apache.org/repos/asf/cxf/blob/b91bd235/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-explicit-client.xml ---------------------------------------------------------------------- diff --git a/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-explicit-client.xml b/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-explicit-client.xml index fcd9424..03e544a 100644 --- a/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-explicit-client.xml +++ b/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-explicit-client.xml @@ -30,7 +30,7 @@ <sec:keyStore type="jks" password="password" resource="keys/Truststore.jks"/> </sec:trustManagers> <sec:cipherSuites> - <sec:cipherSuite>TLS_RSA_WITH_AES_256_CBC_SHA</sec:cipherSuite> + <sec:cipherSuite>TLS_RSA_WITH_AES_256_CBC_SHA256</sec:cipherSuite> </sec:cipherSuites> </http:tlsClientParameters> </http:conduit> http://git-wip-us.apache.org/repos/asf/cxf/blob/b91bd235/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-server.xml ---------------------------------------------------------------------- diff --git a/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-server.xml b/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-server.xml index 83e6c3f..49b1027 100644 --- a/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-server.xml +++ b/systests/transports/src/test/resources/org/apache/cxf/systest/https/ciphersuites/ciphersuites-server.xml @@ -34,6 +34,7 @@ <sec:clientAuthentication want="false" required="false"/> <sec:cipherSuitesFilter> <sec:include>.*_WITH_AES_.*</sec:include> + <sec:exclude>SSL_RSA_WITH_DES_CBC_SHA</sec:exclude> </sec:cipherSuitesFilter> </httpj:tlsServerParameters> </httpj:engine> @@ -53,7 +54,6 @@ </jaxws:inInterceptors> </jaxws:endpoint> - <httpj:engine-factory id="rc4-tls-settings"> <httpj:engine port="${testutil.ports.CipherSuitesServer.2}"> <httpj:tlsServerParameters> @@ -107,7 +107,7 @@ </sec:keyManagers> <sec:clientAuthentication want="false" required="false"/> <sec:cipherSuites> - <sec:cipherSuite>TLS_RSA_WITH_AES_256_CBC_SHA</sec:cipherSuite> + <sec:cipherSuite>TLS_RSA_WITH_AES_256_CBC_SHA256</sec:cipherSuite> </sec:cipherSuites> </httpj:tlsServerParameters> </httpj:engine> @@ -148,4 +148,5 @@ </bean> </jaxws:inInterceptors> </jaxws:endpoint> + </beans>
