I started a new thread on the mailing list to propose an
implementation of option #2 : "[CXF-2693] Allow to use
HttpsURLConnection's defaultSSLSocketFactory and
defaultHostnameVerifier in CXF client"
Could you give me a feedback on this implementation ? Is it the kind
of thing you thought about or
Regarding exception messages, my mistake if my explanation was not
clear enough. I share Christian's interest in root cause exception
message in english to search google.
My idea is to sometimes wrap root exceptions in exceptions that hold
contextual messages ; I already proposed some enhancements
I guess you can add additional info to the error message if you like, but the
advantage of keeping as much of the regular text as possible is that it
helps nicely with Googling. I'm reminded of something (I believe) Christian
Scheider had said, that he does *not* like error messages to be transla
Hello,
For the educational side, I feel we could help users enhancing the
exception messages. For example, a "SunCertPathBuilderException:
unable to find valid certification path to requested target" for a
self signed certificate could be more explanatory.
=> I would be very happy to make proposit
I think there have been calls for option #2 for other reasons besides
disabling the X509 checks. So #2 provides additional benefits--it's
probably something we should be supporting anyway. I also like option #2
politically (we're not explicitly allowing disabling of the X509 checks,
it's just we
I personally prefer option #1 as well. As you noted, the code was already
there, just commented out. That's because I've needed this several times
before when debugging issues that people have sent me. Having a config
option is much better as I wouldn't need to run the test cases in a modi
Dear all,
I am deeply sorry for my premature commit on [CXF-2688] "Allow
deactivation of SSL X509 Certificates validation". I reverted
everything and I would be happy to discuss the point on the mailing
list.
The idea of CXF-2688 was to ease usage of self-signed certificates
on non-produ