Hi, the CXF documentation, on the SSL configuration page[1], refers us to a 2007 blog entry[2] which stresses a need to add a "secureSocketProtocol="SSL" attribute/value pair to the http:tlsClientParameters element as the blogger illustrated below:

 <http:conduit 
name="{https://myhost.com/this/is/namespace}MyPortName.http-conduit";>
       <http:authorization>
           <sec:UserName>usernamehere</sec:UserName>
           <sec:Password>passwordhere</sec:Password>
       </http:authorization>
       <http:tlsClientParameters secureSocketProtocol="SSL">

       </http:tlsClientParameters>
</http:conduit>

This is instead of relying on the default "TLS" value. Question: in this day and age, is there any reason to explicitly set this to "SSL" instead of relying on the default TLS value? If no (or exceedingly rare), I might remove the reference to the blog article to reduce confusion.

Thanks,
Glen

[1] http://cxf.apache.org/docs/client-http-transport-including-ssl-support.html#ClientHTTPTransport%28includingSSLsupport%29-ConfiguringSSLSupport

[2] http://techpolesen.blogspot.com/2007/08/using-ssl-with-xfirecxf-battling.html

--
Glen Mazza
Talend Community Coders - coders.talend.com
blog: www.jroller.com/gmazza

Reply via email to