[CXF-8953] Better support of the HTTPS protocol versions used by client/server conduits

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.5.7, 3.6.2, 4.0.3
• Fix Version/s: 3.5.8, 3.6.3, 4.0.4
• Estimated Complexity: Unknown
• Assignee: Andriy Redko
• Reporter: Andriy Redko
• Created: 02/Nov/23 11:57
• Updated: 01/Dec/23 23:54
• Resolved: 01/Dec/23 23:54

Description

Undertow server conduit does not support TLSv1.3 (see please https://issues.apache.org/jira/browse/CXF-8952?focusedCommentId=17782106&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17782106)

The HTTP client conduits should consult https.protocols system property (see please https://blogs.oracle.com/java/post/diagnosing-tls-ssl-and-https)

 

Documentation update: https://cwiki.apache.org/confluence/display/CXF20DOC/JAX-RS+Client+API#JAXRSClientAPI-ClientsandHTTP(s)

Issue Links

• relates to: CXF-8952 HttpClientHTTPConduit in CXF doesn't support TLSv1.3 along with other protocols
• links to: GitHub Pull Request #1533