Even if the proxy stuffs works and it is stored in a static map, it cannot be shared by all processes, right? How about caching the jaxb content in ehcache? That's how Hibernate caches its objects.
On Sat, Mar 29, 2008 at 1:46 AM, Daniel Kulp <[EMAIL PROTECTED]> wrote: > On Friday 28 March 2008, Benson Margulies wrote: > > Dan, > > > > Can we really blame the GC? When I profile a loop of 1000 client > > endpoint creations, I think I see 1000 JAXB context creations. Surely > > the GC isn't working *that* hard? > > > > I'll certainly try the experiment of holding out an endpoint. > > Well, there's the chance that the JAXB cache isn't actually working. :-) > There is code in there to cache the contexts, but it could be broken. > > Dan > > > > > --benson > > > > On Fri, Mar 28, 2008 at 1:38 PM, Daniel Kulp <[EMAIL PROTECTED]> wrote: > > > Chris, > > > > > > Can you try something? Create a single proxy and keep that proxy > > > around (like in a static or something) for the duration of the test. > > > You don't need to use it, it just needs to stay around. > > > > > > We do do some caching of JAXB contexts (we should probably cache the > > > schemas that go with that context), but those are stored in a > > > WeakHashMap type thing so if something isn't kept around to hold > > > onto them, they would get collected and have to be recreated. > > > Likewise, the wsdl and and schemas from the wsdl need something > > > holding onto them to keep them from being collected. > > > > > > > > > Dan > > > > > > On Friday 28 March 2008, Christopher Cheng wrote: > > > > You could try to generate java codes using " > > > > org.apache.cxf.tools.wsdlto.WSDLToJava" with the following wsdl > > > > and see the performance. > > > > > > > > http://webservices.sabre.com/wsdl/sabreXML1.0.00/tpf/OTA_HotelAvai > > > >lLLS 1.5.1RQ.wsdl > > > > > > > > If it's jaxb that's causing the performance problem, which > > > > databinding in your opinion has the best performance? > > > > > > > > > > > > On Fri, Mar 28, 2008 at 11:26 PM, Benson Margulies > > > > <[EMAIL PROTECTED]> > > > > > > > > wrote: > > > > > Please supply some sort of test case. I've profiled extensively. > > > > > I don't believe that service caching, as discussed, would have > > > > > any effect. The current 2.1 code (as ported by Dan to 2.0.5) > > > > > appears to be constrained by the performance of JAXB, and I > > > > > don't think we have a caching opportunity there, though I would > > > > > love to be wrong. Perhaps there's something about your > > > > > services that use a lot more time in the service model code than > > > > > the sample > > > > > I've been profiling. > > > > > > > > > > On Fri, Mar 28, 2008 at 8:13 AM, Christopher Cheng < > > > > > > > > > > [EMAIL PROTECTED]> wrote: > > > > > > I just tried to rerun it with the snapshot 2.0.5. It is > > > > > > running about > > > > > > > > > > 20% > > > > > > > > > > > faster, but it still takes 3 seconds to build services. > > > > > > I hope that the service caching will be available soon so I > > > > > > can migrate the > > > > > > current axis-1.2 application to cxf > > > > > > > > > > > > On Thu, Mar 20, 2008 at 7:33 PM, Daniel Kulp > > > > > > <[EMAIL PROTECTED]> > > > > > > wrote: > > > > > > > On Thursday 20 March 2008, Christopher Cheng wrote: > > > > > > > > Looks like 2.0.5 is going to release soon, is this service > > > > > > > > caching > > > > > > > > > > in > > > > > > > > > > > > > 2.0.5? > > > > > > > > > > > > > > Yea. The stuff that Benson has done is being ported to > > > > > > > 2.0.x. > > > > > > > > > > > > > > That said, it's not the full service caching. It's > > > > > > > basically a bunch > > > > > > > > > > > > of > > > > > > > > > > > > > incremental improvements to the current algorithms, but it's > > > > > > > > > > definitely > > > > > > > > > > > > a big improvement. > > > > > > > > > > > > > > Dan > > > > > > > > > > > > > > > On Wed, Mar 5, 2008 at 11:50 AM, Christopher Cheng < > > > > > > > > > > > > > > > > [EMAIL PROTECTED]> wrote: > > > > > > > > > Looking forward to have this in the next release 2.0.5 > > > > > > > > > or 2.1 :) > > > > > > > > > > > > > > > > > > On Tue, Mar 4, 2008 at 11:55 PM, Daniel Kulp > > > > > > > > > <[EMAIL PROTECTED]> > > > > > > > > > > > > > > wrote: > > > > > > > > > > Willem, > > > > > > > > > > > > > > > > > > > > The issue is that they CAN be modified after that. > > > > > > > > > > One popular modification is to grab the EndpointInfo > > > > > > > > > > out of it and change > > > > > > > > > > the > > > > > > > > > > > > > > > address. Other things like adding interceptors to > > > > > > > > > > the BindingInfo, changing properties on the service > > > > > > > > > > (like to enable schema validation), etc... are all > > > > > > > > > > modifications that affect the servicemodel. > > > > > > > > > > > > > > > > > > > > Databinding is "less" of an issue, but still one. > > > > > > > > > > For example, the databinding has an "mtomThreshold" > > > > > > > > > > and a namespaceMap that > > > > > > > > > > can > > > > > > > > > > > > > > > be set programatically. > > > > > > > > > > > > > > > > > > > > In both of those cases, a modification should only > > > > > > > > > > affect the proxy on which the modification is made. > > > > > > > > > > Thus, the > > > > > > > > > > servicemodel > > > > > > > > > > > > > > > would need a full "clone", which may not be easy to > > > > > > > > > > do. It's certainly a lot more code to add. > > > > > > > > > > > > > > > > > > > > That said, I don't think it's a bad idea at all. On > > > > > > > > > > the > > > > > > > > > > contrary, > > > > > > > > > > > > > > > it's a > > > > > > > > > > good idea. It's just a bit of work. > > > > > > > > > > > > > > > > > > > > Dan > > > > > > > > > > > > > > > > > > > > On Tuesday 04 March 2008, Willem Jiang wrote: > > > > > > > > > > > Hi Dan, > > > > > > > > > > > > > > > > > > > > > > I think we could cache the ServiceInfo object and > > > > > > > > > > > DataBinding object which will take lots of time to > > > > > > > > > > > be created and can't be modified after that. Any > > > > > > > > > > > thought? > > > > > > > > > > > > > > > > > > > > > > Willem > > > > > > > > > > > > > > > > > > > > > > Daniel Kulp wrote: > > > > > > > > > > > > On Tuesday 04 March 2008, Christopher Cheng wrote: > > > > > > > > > > > >> I haven't read the codes of Axis, but I have been > > > > > > > > > > > >> using it for 2 years and it doesn't have this > > > > > > > > > > > >> problem. Having an overhead for 5-8 seconds is > > > > > > > > > > > >> not an option for a production system in term of > > > > > > > > > > > >> performance > > > > > > > > > > > >> > > > > > > > > > > > >> What you are saying is that all the services must > > > > > > > > > > > >> implement Clonable interface? > > > > > > > > > > > > > > > > > > > > > > > > No, not the services themselves. Just our > > > > > > > > > > > > interal service model stuff that holds all the > > > > > > > > > > > > metadata. Basically, when creating a new service, > > > > > > > > > > > > we need to calculate the metadata. We should cache > > > > > > > > > > > > that if possible. > > > > > > > > > > > > > > > > > > > > > > > > Dan > > > > > > > > > > > > > > > > > > > > > > > >> On Tue, Mar 4, 2008 at 4:48 AM, Daniel Kulp > > > > > > > > > > > >> <[EMAIL PROTECTED]> > > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > >>> Christopher, > > > > > > > > > > > >>> > > > > > > > > > > > >>> We cannot just "reuse" the Service model objects > > > > > > > > > > > >>> as they > > > > > > > > > > are > > > > > > > > > > > > > > > > >>> completely modifiable at runtime. For example, > > > > > > > > > > > >>> one proxy could be reconfigured with new address > > > > > > > > > > > >>> or have additional interceptors added or > > > > > > > > > > > >>> similar. Those shouldn't affect others. > > > > > > > > > > > >>> > > > > > > > > > > > >>> On option that propably would make sense is to > > > > > > > > > > > >>> add a fast "clone" functionality to the entire > > > > > > > > > > > >>> service model so we could cache one, and then > > > > > > > > > > > >>> clone it whenever one is really needed. All > > > > > > > > > > > >>> the individual versions could be modified > > > > > > > > > > and > > > > > > > > > > > > > > > > >>> not affect the original. However, doing that > > > > > > > > > > > >>> would be > > > > > > > > > > quite > > > > > > > > > > > > > > > > >>> a bit of work as there are a LOT of classes that > > > > > > > > > > > >>> would > > > > > > > > > > need > > > > > > > > > > > > > > > > >>> to be updated to support that. > > > > > > > > > > > >>> > > > > > > > > > > > >>> Patches towards that end would be great. :-) > > > > > > > > > > > >>> > > > > > > > > > > > >>> Dan > > > > > > > > > > > >>> > > > > > > > > > > > >>> On Monday 03 March 2008, Christopher Cheng wrote: > > > > > > > > > > > >>>> wsdl is indeed cached in > > > > > > > > > > > >>>> WSDLManagerImpl.definitionsMap > > > > > > > > > > > >>>> > > > > > > > > > > > >>>> After reading the codes, I have some questions. > > > > > > > > > > > >>>> My workstation is a PentiumD 3GHz with 1.5GB > > > > > > > > > > > >>>> RAM > > > > > > > > > > > >>>> > > > > > > > > > > > >>>> In the class > > > > > > > > > > > >>>> " > > > > > > > > > > org.apache.cxf.service.factory.ReflectionServiceFactoryBea > > > > > > > > > > > > > > > > >>>>n.buil d Serv iceFromWSDL(String url)", > > > > > > > > > > > >>>> "setService(factory.create());" takes 3 seconds > > > > > > > > > > > >>>> "getDataBinding().initialize(getService());" > > > > > > > > > > > >>>> takes 2 seconds > > > > > > > > > > > >>>> > > > > > > > > > > > >>>> These 2 methods are called even in 2nd calls. > > > > > > > > > > > >>>> Can you > > > > > > > > > > also > > > > > > > > > > > > > > > > >>>> cache the services perhaps using jakarta > > > > > > > > > > > >>>> commons-pool? or eh-cache? > > > > > > > > > > > >>>> > > > > > > > > > > > >>>> By the way, I found that the wsdl is put into > > > > > > > > > > > >>>> the definitionMap twice if " > > > > > > > > > > > >>>> WSDLManagerImpl.getDefinition > > > > > > > > > > (URL > > > > > > > > > > > > > > > > >>>> url)" is called. First in "getDefintion(URL > > > > > > > > > > > >>>> url)" at line 147 and second in > > > > > > > > > > > >>>> "loadDefinition(String url)" at line > > > > > > > > > > 201. > > > > > > > > > > > > > > > > >>>> On Mon, Mar 3, 2008 at 4:22 PM, Christopher > > > > > > > > > > > >>>> Cheng < > > > > > > > > > > > >>>> > > > > > > > > > > > >>>> [EMAIL PROTECTED]> wrote: > > > > > > > > > > > >>>>> wsdl is indeed cached in > > > > > > > > > > > >>>>> WSDLManagerImpl.definitionsMap > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> After reading the codes, I have some > > > > > > > > > > > >>>>> questions. My workstation is a PentiumD 3GHz > > > > > > > > > > > >>>>> with 1.5GB RAM > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> In the class " > > > > > > > > > > org.apache.cxf.service.factory.ReflectionServiceFactoryBea > > > > > > > > > > > > > > > > >>>>>n.buil dSer viceFromWSDL(String url)", > > > > > > > > > > > >>>>> "setService(factory.create());" takes 3 > > > > > > > > > > > >>>>> seconds > > > > > > > > > > > >>>>> "getDataBinding().initialize(getService());" > > > > > > > > > > > >>>>> takes 2 seconds > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> These 2 methods are called even in 2nd calls. > > > > > > > > > > > >>>>> Can you > > > > > > > > > > also > > > > > > > > > > > > > > > > >>>>> cache the services perhaps using jakarta > > > > > > > > > > > >>>>> commons-pool? > > > > > > > > > > or > > > > > > > > > > > > > > > > >>>>> eh-cache? > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> By the way, I found that the wsdl is put into > > > > > > > > > > > >>>>> the definitionMap twice if " > > > > > > > > > > > >>>>> WSDLManagerImpl.getDefinition > > > > > > > > > > (URL > > > > > > > > > > > > > > > > >>>>> url)" is called. First in "getDefintion(URL > > > > > > > > > > > >>>>> url)" at > > > > > > > > > > line > > > > > > > > > > > > > > > > >>>>> 147 and second in "loadDefinition(String url)" > > > > > > > > > > > >>>>> at line 201. > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> On Mon, Mar 3, 2008 at 9:43 AM, Willem Jiang > > > > > > > > > > > >>>>> <[EMAIL PROTECTED]> > > > > > > > > > > > >>>>> > > > > > > > > > > > >>>>> wrote: > > > > > > > > > > > >>>>>> Hi, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> I just went through the code, we really cache > > > > > > > > > > > >>>>>> the WSDL definition in CXF. > > > > > > > > > > > >>>>>> Could you send your test case and wsdl file > > > > > > > > > > > >>>>>> to me ? I > > > > > > > > > > may > > > > > > > > > > > > > > > > >>>>>> need to trace it for more information. > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> Regards, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> Willem > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> Christopher Cheng wrote: > > > > > > > > > > > >>>>>>> I think the issue is still there. I used a > > > > > > > > > > > >>>>>>> for loop to execute the > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> same > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>> call, all takes approximately the same time > > > > > > > > > > > >>>>>>> to create service. I guess > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> that > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>> the service itself is not cached. > > > > > > > > > > > >>>>>>> > > > > > > > > > > > >>>>>>> On Sun, Mar 2, 2008 at 11:43 AM, Willem > > > > > > > > > > > >>>>>>> Jiang <[EMAIL PROTECTED]> > > > > > > > > > > > >>>>>>> > > > > > > > > > > > >>>>>>> wrote: > > > > > > > > > > > >>>>>>>> Here is the JIRA[1] which describe the same > > > > > > > > > > > >>>>>>>> thing > > > > > > > > > > that > > > > > > > > > > > > > > > > >>>>>>>> you want. I don't know if it was really > > > > > > > > > > > >>>>>>>> resolved, > > > > > > > > > > could > > > > > > > > > > > > > > > > >>>>>>>> you try the latest released CXF 2.0.4 for > > > > > > > > > > > >>>>>>>> it. > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> If the issue is still there, please let me > > > > > > > > > > > >>>>>>>> know , I will put it to my next week todo > > > > > > > > > > > >>>>>>>> list. > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> [1]https://issues.apache.org/jira/browse/CX > > > > > > > > > > > >>>>>>>>F-69 9 > > > > > > > > > > > >>>>>>>> [2]http://cwiki.apache.org/CXF/download.htm > > > > > > > > > > > >>>>>>>>l > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> Willem. > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> Christopher Cheng wrote: > > > > > > > > > > > >>>>>>>>> I am migrating from Axis1.2 to CXF 2.0.3 > > > > > > > > > > > >>>>>>>>> > > > > > > > > > > > >>>>>>>>> I understand that it will take a long time > > > > > > > > > > > >>>>>>>>> to build for the first > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> time. > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>> What > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>>> I am wondering is that why it takes so > > > > > > > > > > > >>>>>>>>> long for the second and third > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> time? > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>>> Is there any caching of services? Axis > > > > > > > > > > > >>>>>>>>> does not seem to have this > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> issue. > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>> Christopher Cheng wrote: > > > > > > > > > > > >>>>>>>>>> Attached is the log > > > > > > > > > > > >>>>>>>>>> > > > > > > > > > > > >>>>>>>>>> ----- Original Message ----- > > > > > > > > > > > >>>>>>>>>> From: "Willem Jiang" > > > > > > > > > > > >>>>>>>>>> <[EMAIL PROTECTED]> To: > > > > > > > > > > > >>>>>>>>>> <[email protected]> Sent: > > > > > > > > > > > >>>>>>>>>> Saturday, March 01, 2008 8:53 PM Subject: > > > > > > > > > > > >>>>>>>>>> Re: service caching? > > > > > > > > > > > >>>>>>>>>> > > > > > > > > > > > >>>>>>>>>>> Hi > > > > > > > > > > > >>>>>>>>>>> > > > > > > > > > > > >>>>>>>>>>> Could you set the logger level to FINE ? > > > > > > > > > > > >>>>>>>>>>> So we can get more information about the > > > > > > > > > > > >>>>>>>>>>> service publishing. > > > > > > > > > > > >>>>>>>>>>> > > > > > > > > > > > >>>>>>>>>>> Willem. > > > > > > > > > > > >>>>>>>>>>> > > > > > > > > > > > >>>>>>>>>>> Christopher Cheng wrote: > > > > > > > > > > > >>>>>>>>>>>> When I call the service as a client, it > > > > > > > > > > > >>>>>>>>>>>> takes 5 seconds to load. > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> I am > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> not > > > > > > > > > > > >>>>>>>>>>>> sure whether it takes 5 seconds to > > > > > > > > > > > >>>>>>>>>>>> create the service or it takes > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> 5 > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> seconds > > > > > > > > > > > >>>>>>>>>>>> to look up for ciper filters. I am > > > > > > > > > > > >>>>>>>>>>>> wondering if > > > > > > > > > > the > > > > > > > > > > > > > > > > >>>>>>>>>>>> services are cached... > > > > > > > > > > > >>>>>>>>>>>> Feb 29, 2008 2:14:42 PM > > > > > > > > > > org.apache.cxf.service.factory.ReflectionServiceFac > > > > > > > > > > > > > > > > >>>>>>>>>>>>tory Bean buildServiceFromWSDL > > > > > > > > > > > >>>>>>>>>>>> INFO: Creating Service > > > > > > > > > > > >>>>>>>>>>>> { > > > > > > > > > > https://webservices.sabre.com/websvc}OTA_HotelAvai<https://webservices.sabre.com/websvc%7DOTA_HotelAvai> > <https://webse > > > > >rvices.sabre.com/websvc%7DOTA_HotelAvai> > > > > > > <https://webservic > > > > > > > >es.sabre.com/websvc%7DOTA_HotelAvai> > > > > > <https://webservices.sabre.com/websvc%7DOTA_HotelAvai> > > > > > > > > > > > <https://webservices.sabre.com/websvc%7DOTA_HotelAvai> > > > > > > > > > > > > > > > > > >>>>>>>>>>>>lSer< > > > > > > > > > > https://webservices.sabre.com/websvc%7DOTA_Hote > > > > > > > > > > > > > > > > >>>>>>>>>>>>lAvailSer> > > > > > > > > > > > >>>>>>>>>>>> vice< > > > > > > > > > > https://webservices.sabre.com/websvc%7DOTA_Hot > > > > > > > > > > > > > > > > >>>>>>>>>>>>elAva ilService> > > > > > > > > > > > >>>>>>>>>>>> < > > > > > > > > > > https://webservices.sabre.com/websvc%7DOTA_HotelAv > > > > > > > > > > > > > > > > >>>>>>>>>>>>ailS ervic e> > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> < > > > > > > > > > > https://webservices.sabre.com/websvc%7DOTA_HotelAvailSer > > > > > > > > > > > > > > > > >>>>>>vice> from > > > > > > > > > > > >>> > > > > > > > > > > > >>> WSDL: > > > > > > > > > > > >>>>>>>>>>>> file:/C:/Java/abacus-webconnect-1.14.0. > > > > > > > > > > > >>>>>>>>>>>>rc1 > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> /wsdl/OTA_HotelAvailLLS1.4.1RQ.wsdl > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>>>>>> Feb 29, 2008 2:14:47 PM > > > > > > > > > > > >>>>>>>>>>>> org.apache.cxf.transport.https.SSLUtils > > > > > > > > > > > >>>>>>>>>>>> getCiphersuites INFO: The cipher suites > > > > > > > > > > > >>>>>>>>>>>> have not been configured, falling back > > > > > > > > > > > >>>>>>>>>>>> to > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>> cipher > > > > > > > > > > > >>>>>>>> > > > > > > > > > > > >>>>>>>>>>>> suite filters. > > > > > > > > > > > >>>>>>>>>>>> Feb 29, 2008 2:14:47 PM > > > > > > > > > > > >>>>>>>>>>>> org.apache.cxf.transport.https.SSLUtils > > > > > > > > > > > >>>>>>>>>>>> getCiphersFromList INFO: The cipher > > > > > > > > > > > >>>>>>>>>>>> suites have been set to > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> SSL_RSA_WITH_RC4_128_MD5, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> SSL_RSA_WITH_RC4_128_SHA, > > > > > > > > > > SSL_RSA_WITH_DES_CBC_SHA, > > > > > > > > > > > > > > > > >>>>>>>>>>>> SSL_DHE_RSA_WITH_DES_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_DHE_DSS_WITH_DES_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_RSA_EXPORT_WITH_RC4_40_MD5, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_RSA_WITH_NULL_MD5, > > > > > > > > > > > >>>>>>>>>>>> SSL_RSA_WITH_NULL_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_DH_anon_WITH_RC4_128_MD5, > > > > > > > > > > > >>>>>>>>>>>> TLS_DH_anon_WITH_AES_128_CBC_SHA, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> SSL_DH_anon_WITH_DES_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> SSL_DH_anon_EXPORT_WITH_RC4_40_MD5, > > > > > > > > > > > >>>>>>>>>>>> SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> TLS_KRB5_WITH_DES_CBC_SHA, > > > > > > > > > > > >>>>>>>>>>>> TLS_KRB5_WITH_DES_CBC_MD5, > > > > > > > > > > > >>>>>>>>>>>> TLS_KRB5_EXPORT_WITH_RC4_40_SHA, > > > > > > > > > > > >>>>>>>>>>>> TLS_KRB5_EXPORT_WITH_RC4_40_MD5, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA, > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5. > > > > > > > > > > > >>>>>>>>>>>> Feb 29, > > > > > > > > > > 2008 > > > > > > > > > > > > > > > > >>>>>>>>>>>> 2:14:48 PM > > > > > > > > > > org.apache.cxf.interceptor.LoggingOutInterceptor$LoggingC > > > > > > > > > > > > > > > > >>>>>>allba ckon Close > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> I have put this in my cxf.xml as in > > > > > > > > > > http://cwiki.apache.org/CXF20DOC/client-http-transp > > > > > > > > > > > > > > > > >>>>>>>>>>>>ort. html , but > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> it > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> doesn't > > > > > > > > > > > >>>>>>>>>>>> help... <http:conduit > > > > > > > > > > > >>>>>>>>>>>> name="*.http-conduit"> > > > > > > > > > > > >>>>>>>>>>>> <http:tlsClientParameters > > > > > > > > > > > >>>>>>>>>>>> secureSocketProtocol="SSL"> > > > > > > > > > > > >>>>>>>>>>>> <sec:cipherSuitesFilter> <!-- these > > > > > > > > > > > >>>>>>>>>>>> filters > > > > > > > > > > ensure > > > > > > > > > > > > > > > > >>>>>>>>>>>> that a ciphersuite with export-suitable > > > > > > > > > > > >>>>>>>>>>>> or null encryption is used, but exclude > > > > > > > > > > > >>>>>>>>>>>> anonymous Diffie-Hellman key change > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> as > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> this is vulnerable to > > > > > > > > > > > >>>>>>>>>>>> man-in-the-middle attacks > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>> --> > > > > > > > > > > > >>>>>> > > > > > > > > > > > >>>>>>>>>>>> <sec:include>.*_EXPORT_.*</sec:include> > > > > > > > > > > > >>>>>>>>>>>> > > > > > > > > > > > >>>>>>>>>>>> <sec:include>.*_EXPORT1024_.*</sec:incl > > > > > > > > > > > >>>>>>>>>>>>ude> > > > > > > > > > > > >>>>>>>>>>>> <sec:include>.*_WITH_DES_.*</sec:includ > > > > > > > > > > > >>>>>>>>>>>>e> > > > > > > > > > > > >>>>>>>>>>>> <sec:include>.*_WITH_NULL_.*</sec:inclu > > > > > > > > > > > >>>>>>>>>>>>de> > > > > > > > > > > > >>>>>>>>>>>> <sec:exclude>.*_DH_anon_.*</sec:exclude > > > > > > > > > > > >>>>>>>>>>>>> </sec:cipherSuitesFilter> > > > > > > > > > > > >>>>>>>>>>>> </http:tlsClientParameters> > > > > > > > > > > > >>>>>>>>>>>> </http:conduit> > > > > > > > > > > > >>>>>>>>>> > > > > > > > > > > > >>>>>>>>>> > > > > > > > > > > > >>>>>>>>>> http://www.nabble.com/file/p15773252/cxf. > > > > > > > > > > > >>>>>>>>>>log > > > > > > > > > > cxf.log > > > > > > > > > > > > > > > > >>> -- > > > > > > > > > > > >>> J. Daniel Kulp > > > > > > > > > > > >>> Principal Engineer, IONA > > > > > > > > > > > >>> [EMAIL PROTECTED] > > > > > > > > > > > >>> http://www.dankulp.com/blog > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > J. Daniel Kulp > > > > > > > > > > Principal Engineer, IONA > > > > > > > > > > [EMAIL PROTECTED] > > > > > > > > > > http://www.dankulp.com/blog > > > > > > > > > > > > > > -- > > > > > > > J. Daniel Kulp > > > > > > > Principal Engineer, IONA > > > > > > > [EMAIL PROTECTED] > > > > > > > http://www.dankulp.com/blog > > > > > > -- > > > J. Daniel Kulp > > > Principal Engineer, IONA > > > [EMAIL PROTECTED] > > > http://www.dankulp.com/blog > > > > -- > J. Daniel Kulp > Principal Engineer, IONA > [EMAIL PROTECTED] > http://www.dankulp.com/blog >
