[CXF-8674] Custom SSLContext using async http-client5 does not work

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.4.6, 3.5.1
• Fix Version/s: 3.5.2, 3.4.7, 4.0.0
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Fernando Soares Carnevale Ito
• Created: 09/Mar/22 16:25
• Updated: 11/Mar/22 00:55
• Resolved: 11/Mar/22 00:55

Description

AsyncHTTPConduit configures httpclient5 tlsstrategy here

however this configuration is actually never used. Instead, the http-client5 is always built using the system default TlsStrategy here

The result is that custom SSLContext configured in the httpconduit is not honored.

The current workaround is to keep using cxf-rt-transports-http-hc, or force using the sync httpclient.

I did a quick test propagating the RegistryBuilder<TlsStrategy> built at AsyncHTTPConduit up until the httpclient is built and the custom SSLContext started being used.

Issue Links

• relates to: CXF-8667 Custom certificate alias not being used when using HC5 AsyncHTTPConduit