SSLSocketFactory.getDefault() vs SSLContext ... getSocketFactory()?

Thread view:

robert@elastica.com - 12 Mar 2005 06:02 GMT

What is the difference b/w these two approaches of getting a
SSLSocketFactory..

In Weblogic 7.0sp4 it seems that only if you go thru the SSLContext
will it setup the trusted CA certificates correctly.

ie. if you establish a connection via getDefault() by the time the
handshake happens it will abort because it doesn't know about any of
the trusted CA certificates.

Reply to this Message

robert@elastica.com - 12 Mar 2005 20:52 GMT

Looking at the documentation it would appear that you have to use

weblogic.security.SSL.SSLSocketFactory and instead of getDefault() I
should call getDefaultJSSE() which will return the Certicom
implementation instead of the Phaos one. This means that folks should
expect pluggability with Axis and other frameworks that are geared
towards JSSE.

Reply to this Message

robert@elastica.com - 12 Mar 2005 21:50 GMT

Looking at the documentation it would appear that you have to use

weblogic.security.SSL.SSLSocketFactory and instead of getDefault() I
should call getDefaultJSSE() which will return the Certicom
implementation instead of the Phaos one. This means that folks should
not expect pluggability with Axis and other frameworks that are geared
towards JSSE unless they write their own SSLSocketFactory.

Reply to this Message

SSLSocketFactory.getDefault() vs SSLContext ... getSocketFactory()?

Free Magazines