[
https://issues.apache.org/jira/browse/CXF-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh reassigned CXF-8326:
----------------------------------------
Assignee: Colm O hEigeartaigh
> SSLContext protocol version is ignored
> --------------------------------------
>
> Key: CXF-8326
> URL: https://issues.apache.org/jira/browse/CXF-8326
> Project: CXF
> Issue Type: Bug
> Components: Transports
> Affects Versions: 3.1.4
> Reporter: Alain Sellerin
> Assignee: Colm O hEigeartaigh
> Priority: Major
>
> Hi,
> I'm doing a migration from CXF 2.4.6 to 3.1.4
>
> This code is working perfectly fine in 2.4.6:
> {noformat}
> SSLContext sslcontext = SSLContext.getInstance("TLSv1");
> ...
> TLSClientParameters tlsClientParameters = new TLSClientParameters();
> tlsClientParameters.setSSLSocketFactory(sslcontext.getSocketFactory());
> http.setTlsClientParameters(tlsClientParameters);{noformat}
> The ssl protocol version is respected when making the call (i-e TLSv1)
> With SSLContext.getInstance("TLSv1.1") the call is made with TLSv1.1
> With SSLContext.getInstance("TLSv1.2") the call is made with TLSv1.2
> All is fine.
>
> However, in 3.1.4, no matter the provided tls version it will always be
> TLSv1.2. The provided ssl version in SSLContext.getInstance("TLSv1") is just
> ignored.
> I checked with 3.2.7 and 2.7.18. It is failing as well.
>
> Thank you in advance for checking it.
> Regards
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
