RE: Enhancing HTTP-based connector to support SSL
"Bordet, Simone" <[email protected]>
| Newsgroups | gmane.comp.java.mx4j.devel |
|---|---|
| Message-ID | <F4F4494F4618794E99E59D41C5292FFD018684F0@mnoexc01.emea.cpqcorp.net> |
Hi, I have committed the code, and tests are running as I write. > The problems occurs with the Axis adminclient when connecting to the > webcontainer to deploy the wssd. By default the admin client > needs to trust > the webcontainer certificate, so if the web container > certificate is self > signed and not included in the client trust store we have an issue. > This is what was happening for me. > I have no room in my application to set the generic ssl > system properties such > as "javax.net.ssl.trustStore" to fix the issue and i did not wanted > to add the web container self signed certificate to axis > client trust store (I find this not really clean..) [snip] Okay, I see this as a specific problem you have (don't like to set required system properties, don't like to pay verisign for a trusted certificate ;), though I agree it may be a common problem. I would prefer a solution where the code by default doesn't do any trick, but allows you to subclass and change Axis as required with little effort. What do you think ? It would be possible for you to take a look at the new code and see if some refactoring would ease subclassing in such a way that it may be a good solution for you ? > The solution i have concerning the webcontainer config "issue" is to > build via a > simple custom API a complete config file for jetty with one > http or https > listener. Save the xml file on hard disk and then instruct > mx4j with the > MX4JRemoteConstants.HTTP_SERVER_CONFIGURATION env param to use the > freshly built config file. Uhm. What about a simpler solution: ship with MX4J an example that shows how to create an http/https-based connector with a sample Jetty configuration file ? It is however true that a simple Jetty configuration file can be shipped with MX4J... I see your point, will think some more about it. Thanks for all your feedback ! Simon ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click