« Return to Thread: Does https connector require a keystore if only outbound endpoints are used

Re: Does https connector require a keystore if only outbound endpoints are used

by Antoni Reus :: Rate this Message:

Reply to Author | View in Thread

Should I raise a jira ticket for this?

Configuring a keystore for a https connector shouldn't be mandatory if
the connector is only used for outbound endponints

-----------------------------------------------------------------------
Antoni Reus Darder
Administració Digital, Negoci Electrònic i Sanitat

F u n d a c i ó  I B I T
Illes Balears Innovació Tecnològica
http://www.ibit.org
-----------------------------------------------------------------------

Abans d'imprimir pensa en la teva responsabilitat i compromís amb el MEDI AMBIENT.


En/na Antoni Reus ha escrit:

> Hi,
>
> We are using HttpsConnector  in Mule 2.1.2 to connect to an https server.
> We don't use any https inbound endpoints, only outbound endpoints.
>
> When HttpsConnector initializes creates a new TlsConfiguration with:
>
> private TlsConfiguration tls = new
> TlsConfiguration(TlsConfiguration.DEFAULT_KEYSTORE);
>
> and then
>
> tls.initialise(false, TlsConfiguration.JSSE_NAMESPACE);
>
> that fails because there is not a valid keystore /  keystore pass /
> key pass
>
> but we don't have any keystore (besides de truststore) because we are
> not using HttpsConnector as a server.
>
> I looks like the problem is that HttpsConnector assumes that an https
> server will be used so it requires a
> keystore for it, but that's not the case when you are using only
> outbound https endpoints.
>
> Should'nt HttpsConnector be like SSLConnector that does'nt set a
> default keystore for TlsConfiguration and calls:
>
> tls.initialise(null == getKeyStore(), TlsConfiguration.JSSE_NAMESPACE);
>
>
>
> Salut.
>

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email


 « Return to Thread: Does https connector require a keystore if only outbound endpoints are used