Re: [basex-talk] TLS 1.2

2017-12-18 Thread Marco Lettere
Great! Thanks to you! M. On 18/12/2017 20:18, Christian Grün wrote: Thanks, Marco. Your pull request has been merged, and the documentation has been updated [1]. Cheers, Christian [1] http://docs.basex.org/wiki/Options#IGNOREHOSTNAME On Mon, Dec 18, 2017 at 10:44 AM, Marco Lettere wrote:

Re: [basex-talk] TLS 1.2

2017-12-18 Thread Christian Grün
Thanks, Marco. Your pull request has been merged, and the documentation has been updated [1]. Cheers, Christian [1] http://docs.basex.org/wiki/Options#IGNOREHOSTNAME On Mon, Dec 18, 2017 at 10:44 AM, Marco Lettere wrote: > Hi Christian, > I've filed a pull request [1] to the github repo. > I'

Re: [basex-talk] TLS 1.2

2017-12-18 Thread Marco Lettere
Hi Christian, I've filed a pull request [1] to the github repo. I've tested it with our use case and it works fine. Check it out and let me know. Regards, Marco. [1] https://github.com/BaseXdb/basex/pull/1533 On 17/12/2017 22:58, Christian Grün wrote: Hi Marco, Thanks for reporting all the det

Re: [basex-talk] TLS 1.2

2017-12-17 Thread Christian Grün
Hi Marco, Thanks for reporting all the details back to us. > Final question to Christian ... instead of ignoring certificates altogether > could you plan for a less risky option IGNORE_HOSTNAME_VERIFICATION which > just ignores the verification of the host name of a certificate? I think so. Cert

Re: [basex-talk] TLS 1.2

2017-12-13 Thread Kristian Kankainen
This is great, thank you. Is there any chance this information will be added to the docs wiki? Cheers Kristian K 13. dets 2017 1:19 PM kirjutas kuupäeval Marco Lettere : Hi all, just a bit of a wrap up in case someone could use it in the future ...

Re: [basex-talk] TLS 1.2

2017-12-13 Thread Marco Lettere
Hi all, just a bit of a wrap up in case someone could use it in the future ... The usecase: Connect to an Identitiy provider through HTTPS based on TLSv1.2 with client authentication required (a password protected PKCS12 file "clientCERTKEY.p12" with client certificate and key was provided tog

Re: [basex-talk] TLS 1.2

2017-12-11 Thread Christian Grün
That’s good news, Marco! All I remember was that I updated the Java keystore with certificates in the part in order to be able to use the https protocol. The IGNORECERT option can be disabled to ignore certificates. Looking forward to your »success story«, Christian On Mon, Dec 11, 2017 at 9:37

Re: [basex-talk] TLS 1.2

2017-12-11 Thread Marco Lettere
Hi again, your words put me on the right way. My doubt was how to pass the information to the http module send-request functon. After some investigation I've found out that it may be done by setting some env variables through -D in the startup scripts pointing to server and client certificates

Re: [basex-talk] TLS 1.2

2017-12-11 Thread Marco Lettere
Hi Christian, currently not too much since I first have to get used to the protocol details of Mutual TLS1.2 authentication [1]. I have a PKCS12 file containing both server and client certificates/keys (which are required for mutual auth) and I'm really not sure how all this info relataed to th

Re: [basex-talk] TLS 1.2

2017-12-07 Thread Christian Grün
Ciao Marco. > Just wanted to be sure that there isn't a way to do everything in XQuery. Is > it? I think the HTTP Module could be used for that. What have you tried so far? Saluti Christian

[basex-talk] TLS 1.2

2017-12-07 Thread Marco Lettere
Hi list, I need to perform an integration with a service that talks HTTP over TLS 1.2. I have the mutual certificates and all the rest. My idea was to do as less as possible (mostly handshaking) in Java and then use the Java call the code from inside XQuery where all the rest happens. Jus