Uploaded image for project: 'Jackrabbit Content Repository'
  1. Jackrabbit Content Repository
  2. JCR-4799

jackrabbit.client.useSystemProperties undone by SSL config: client certificates no longer work

    XMLWordPrintableJSON

Details

    • Patch

    Description

      When jackrabbit.client.useSystemProperties is used in an effort to make java.net.ssl.* constants work, this is undone by the explicit initialisation of SSL.

      As a result, client certificates no longer work, and control over SSL parameters like protocol, etc is lost.

      The fix is to use the SSLConnectionSocketFactory.getSystemSocketFactory() constructor in the system properties case.

      Attachments

        1. jackrabbit-spi2dav-system.patch
          4 kB
          Graham Leggett
        2. jackrabbit-spi2dav-systemv2.patch
          11 kB
          Konrad Windszus
        3. jackrabbit-spi2dav-systemv3.patch
          13 kB
          Konrad Windszus
        4. emptyPKCS12.keystore
          0.1 kB
          Konrad Windszus
        5. JCR-4799.diff
          11 kB
          Julian Reschke

        Issue Links

          is broken by

          Improvement - An improvement or enhancement to an existing feature or task. JCR-4536 spi2dav: allow disabling cert and host name checks for TLS connections

          • Major - Major loss of function.
          • Closed

          Activity

            People

              kwin Konrad Windszus
              minfrin Graham Leggett
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: