All good information. I've done a bit of investigation and found that
this is something that was broken when we upgraded cfhttp to the 4.x
version of Apache Http Commons.
The good news is that the fix wasn't too tricky. Grab tonight's nightly
build and give that a shot.
Andy
On 13/09/2013 23:46, galvanash wrote:
I did this for my "mock" verifier:
i*mport org.apache.http.conn.ssl.X509HostnameVerifier;*
*import java.util.logging.Logger;*
*import java.security.cert.X509Certificate;*
*import java.io.IOException;*
*import javax.net.ssl.SSLSocket;*
*import javax.net.ssl.SSLSession;*
*import javax.net.ssl.SSLException;*
*
*
*public class MockHostnameVerifier implements X509HostnameVerifier {*
*
*
* static {*
* System.out.println("MockHostnameVerifier Class Loaded");*
* }*
**
* public void verify(String host, SSLSocket ssl) throws IOException {*
* System.out.println("Verify 1 - host:" + host );*
* // Do nothing*
* }*
*
*
* public void verify(String host, X509Certificate cert) throws
SSLException {*
* System.out.println("Verify 2 - host:" + host );*
* //Do nothing*
* }*
*
*
* public void verify(String host, String[] cns, String[] subjectAlts)
throws SSLException {*
* System.out.println("Verify 3 - host:" + host );*
* //Do nothing*
* }*
*
*
* public boolean verify(String s, SSLSession sslSession) {*
* System.out.println("Verify 4 - s:" + s );*
* return true; *
* }*
*
*
*}*
*
*
I put the compiled class in WEB-INF/classes
So when I try to run my test code, I see this in the bluedragon.log:
*
*
*13/09/13 17:42.58: -] Using alternative CFHTTP hostname verifier:
MockHostnameVerifier*
*
*
And I see this in the console:
*17:42:58 web.1 | MockHostnameVerifier Class Loaded*
*
*
But I do not see any indication that it is trying to call my verify
method(s)...
Galvanash
--
--
online documentation: http://openbd.org/manual/
http://groups.google.com/group/openbd?hl=en
---
You received this message because you are subscribed to the Google
Groups "Open BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
--
--
online documentation: http://openbd.org/manual/
http://groups.google.com/group/openbd?hl=en
---
You received this message because you are subscribed to the Google Groups "Open BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.