cxf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom.R" <>
Subject CXF client api hook for
Date Thu, 13 May 2010 17:45:13 GMT

Is there a a client api hook for setting the
"" pertaining to the newly
discovered renegotiation TLS/SSL security hole (for those using sun jdk
greater than 1.6.0_18).

My issue is that I would like my cxf client to communicate with a server,
which does yet have a patch release for this while keeping my other client
communications secure.  I was hoping it is possible to avoid using the
global jdk system setting and restricting it to a specific client.

Is this possible?  Can this be done through CXF api?  if not, are there any
other methods/approaches/api that I could tap into to allow this
communication on the latest jdk1.6.0_20?
View this message in context:
Sent from the cxf-dev mailing list archive at

View raw message