Details
-
Sub-task
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
1.5.10, 1.6.3, 1.7.3, 1.8.1
-
None
-
None
Description
The current apachehc driver is using all sorts of deprecated methods and also doesn't make it easy to allow the user to supply correct SSL configuration. Since it doesn't inherit the ssl config from the JVM, it needs to be explicitly specified.
Let's change the default to not permit SSLv3 in a way that allows users to override that.
Example is listed here.
http://stackanswers.com/questions/26429751/java-http-clients-and-poodle
Attachments
Issue Links
- is related to
-
JCLOUDS-1188 ApacheHCHttpCommandExecutorServiceModule should support TLS1.2 only
- Open