[
https://issues.apache.org/jira/browse/CXF-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13090129#comment-13090129
]
Torsten Mielke commented on CXF-2693:
-------------------------------------
I presume there is a typo in the second attribute name in the initial bug
description.
That attribute is surely supposed to be called
useHttpsURLConnectionDefaultHostnameVerifier and not
useHttpsURLConnectionDefaultSslSocketFactory.
Perhaps it can be corrected for completeness?
The SSL docs on Apache are correct.
> Allow to use HttpsURLConnection's defaultSSLSocketFactory and
> defaultHostnameVerifier in CXF client
> ---------------------------------------------------------------------------------------------------
>
> Key: CXF-2693
> URL: https://issues.apache.org/jira/browse/CXF-2693
> Project: CXF
> Issue Type: New Feature
> Components: Transports
> Affects Versions: 2.2.6
> Reporter: Cyrille Le Clerc
> Assignee: Cyrille Le Clerc
> Fix For: 2.2.7, 2.3
>
> Attachments: CXF-2693-1.patch
>
>
> Allow CXF client (JAXWS & JAXRS) for HTTPS calls to use JVM wide SSL
> components :
> *
> [HttpsURLConnection#getDefaultSSLSocketFactory()|http://java.sun.com/javase/6/docs/api/javax/net/ssl/HttpsURLConnection.html#getDefaultSSLSocketFactory()]
> *
> [HttpsURLConnection.html.getDefaultHostnameVerifier()|http://java.sun.com/javase/6/docs/api/javax/net/ssl/HttpsURLConnection.html#getDefaultHostnameVerifier()]
> For this, I propose to add the following attributes to
> {{<http-conf:tlsClientParameters ... />}} :
> || Attribute || Description ||
> | {{useHttpsURLConnectionDefaultSslSocketFactory}} | This attribute specifies
> if HttpsURLConnection.defaultSslSocketFactory should be used to create https
> connections. If 'true', 'jsseProvider', 'secureSocketProtocol',
> 'trustManagers', 'keyManagers', 'secureRandom', 'cipherSuites' and
> 'cipherSuitesFilter' are ignored. |
> | {{useHttpsURLConnectionDefaultSslSocketFactory}} | This attribute specifies
> if HttpsURLConnection.defaultHostnameVerifier should be used to create https
> connections. If 'true', 'disableCNCheck' is ignored. |
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
