Uploaded image for project: 'jclouds'
  1. jclouds
  2. JCLOUDS-753 Investigate HttpCommandExecutorService(s) with regards to POODLE
  3. JCLOUDS-759

Make it easier to configure TLS overrides in apache hc driver

Attach filesAttach ScreenshotAdd voteVotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 1.5.10, 1.6.3, 1.7.3, 1.8.1
    • None
    • jclouds-drivers
    • None

    Description

      The current apachehc driver is using all sorts of deprecated methods and also doesn't make it easy to allow the user to supply correct SSL configuration. Since it doesn't inherit the ssl config from the JVM, it needs to be explicitly specified.

      Let's change the default to not permit SSLv3 in a way that allows users to override that.

      Example is listed here.

      http://stackanswers.com/questions/26429751/java-http-clients-and-poodle

      Attachments

        Issue Links

        is related to

        Improvement - An improvement or enhancement to an existing feature or task. JCLOUDS-1188 ApacheHCHttpCommandExecutorServiceModule should support TLS1.2 only

        • Major - Major loss of function.
        • Open

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            Unassigned Unassigned
            adriancole Adrian Cole
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:

              Slack

                Issue deployment