RE: Enhancing HTTP-based connector to support SSL

"Bordet, Simone" <[email protected]>
Newsgroups gmane.comp.java.mx4j.devel
Message-ID <F4F4494F4618794E99E59D41C5292FFD018684F0@mnoexc01.emea.cpqcorp.net>
Hi,

I have committed the code, and tests are running as I write. 

> The problems occurs with the Axis adminclient when connecting to the
> webcontainer to deploy the wssd. By default the admin client 
> needs to trust
> the webcontainer certificate, so if the web container 
> certificate is self
> signed and not included in the client trust store we have an issue.
> This is what was happening for me.
> I have no room in my application to set the generic ssl 
> system properties such
> as "javax.net.ssl.trustStore" to fix the issue and i did not wanted
> to add the web container self signed certificate to axis 
> client trust store (I find this not really clean..)

[snip]

Okay, I see this as a specific problem you have (don't like to set
required system properties, don't like to pay verisign for a trusted
certificate ;), though I agree it may be a common problem.

I would prefer a solution where the code by default doesn't do any
trick, but allows you to subclass and change Axis as required with
little effort.
What do you think ? 
It would be possible for you to take a look at the new code and see if
some refactoring would ease subclassing in such a way that it may be a
good solution for you ?

> The solution i have concerning the webcontainer config "issue" is to 
> build via a
> simple custom API a complete config file for jetty with one 
> http or https
> listener. Save the xml file on hard disk and then instruct 
> mx4j with the
> MX4JRemoteConstants.HTTP_SERVER_CONFIGURATION env param to use the
> freshly built config file.

Uhm. What about a simpler solution: ship with MX4J an example that shows
how to create an http/https-based connector with a sample Jetty
configuration file ?
It is however true that a simple Jetty configuration file can be shipped
with MX4J...
I see your point, will think some more about it.

Thanks for all your feedback !

Simon


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.