ws-muse-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oliver Waeldrich (JIRA)" <j...@apache.org>
Subject [jira] Commented: (MUSE-223) Add capability to specify a SSLSocketFactory for HTTPS based connections in SimpleSoapClient.
Date Wed, 18 Apr 2007 12:27:15 GMT

    [ https://issues.apache.org/jira/browse/MUSE-223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12489711
] 

Oliver Waeldrich commented on MUSE-223:
---------------------------------------

Another problem is, that there are two implementations of HttpsUrlConnection, one in javax.net.ssl
and one in com.sun.net.ssl (deprecated). To be backward compatible we still need to support
the deprecated implementation. 

Therefore, I think it would be quite useful not to pass the SSLSocketFactory to MUSE, but
allow a client implementation to register a handler with the soap client, which is called
e.g. directly after url.openConnection(); The handler would have only one method (e.g. public
void handle(HttpURLConnection); ) where an implementation could manipulate the connection
object as it prefers. 

This would potentially also be a feasible solution for j2ME environments.

> Add capability to specify a SSLSocketFactory for HTTPS based connections in SimpleSoapClient.
> ---------------------------------------------------------------------------------------------
>
>                 Key: MUSE-223
>                 URL: https://issues.apache.org/jira/browse/MUSE-223
>             Project: Muse
>          Issue Type: New Feature
>          Components: Core Engine - Resource and Capability APIs
>            Reporter: Oliver Waeldrich
>         Assigned To: Dan Jemiolo
>             Fix For: 2.3.0
>
>
> In order to use certificate based client authentication with MUSE we would like to specify
a 
> SSLSocketFactory to be used when communicating with a MUSE server. Even though it is
> possible to specify a default SSLSocketFactory (see HttpsURLConnection.setDefaultSSLSocketFactory())
> this is not feasible for environments, where e.g. a client needs to communicate with
multiple 
> server instances using different credentials. 
> Therefore I would suggest an extension to the SimpleSoapClient to specify a SSLSocketFactory
 for https
> connections and to extend the client's send-functionality as indicated by the code below.
>     HttpURLConnection connection = (HttpURLConnection)url.openConnection();
>     if (connection instanceof HttpsURLConnection)
>         if (mySSLSocketFactoryInstance =! null) {
>             ((HttpsURLConnection)connection).setSSLSocketFactory(mySSLSocketFactoryInstance);
>         }
>     }

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: muse-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: muse-dev-help@ws.apache.org


Mime
View raw message