[CXF-2693] Allow to use HttpsURLConnection's defaultSSLSocketFactory and defaultHostnameVerifier in CXF client

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.6
• Fix Version/s: 2.2.7, 2.3
• Component/s: Transports
• Assignee: Cyrille Le Clerc
• Reporter: Cyrille Le Clerc
• Created: 05/Mar/10 00:13
• Updated: 24/Aug/11 10:18
• Resolved: 09/Mar/10 09:13

Description

Allow CXF client (JAXWS & JAXRS) for HTTPS calls to use JVM wide SSL components :

• HttpsURLConnection#getDefaultSSLSocketFactory()
• HttpsURLConnection.html.getDefaultHostnameVerifier()

For this, I propose to add the following attributes to <http-conf:tlsClientParameters ... /> :

Attribute	Description
useHttpsURLConnectionDefaultSslSocketFactory	This attribute specifies if HttpsURLConnection.defaultSslSocketFactory should be used to create https connections. If 'true', 'jsseProvider', 'secureSocketProtocol', 'trustManagers', 'keyManagers', 'secureRandom', 'cipherSuites' and 'cipherSuitesFilter' are ignored.
useHttpsURLConnectionDefaultSslSocketFactory	This attribute specifies if HttpsURLConnection.defaultHostnameVerifier should be used to create https connections. If 'true', 'disableCNCheck' is ignored.