Mailing-List: contact dev-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Received-SPF: pass (athena.apache.org: domain of elakito@gmail.com designates
 209.85.213.41 as permitted sender)
MIME-Version: 1.0
Sender: elakito@gmail.com
In-Reply-To: 
 <CAF8t5Xu5mFRHOhSX7HnmNoyjuTKWg+rU6GjtSjOGEYEspRnzZA@mail.gmail.com>
References: 
 <CAF8t5Xu5mFRHOhSX7HnmNoyjuTKWg+rU6GjtSjOGEYEspRnzZA@mail.gmail.com>
Date: Wed, 4 Jul 2012 12:59:26 +0200
Message-ID: 
 <CAF8t5XvfKZ4QAyuc2ZbUs1qBBfa3vUqHtfmy5PME2mYNKL4W_w@mail.gmail.com>
Subject: more flexibility in configuring httpconduit's tlsClientParameters in
 spring or blueprint?
From: Aki Yoshida <elakito@googlemail.com>
To: dev@cxf.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Hi,
I haven been wondering about this for a while and I would like to hear
your thoughts.

Concretely, I am wondering if people are happy with the current file
or resource based keystore instantiation provided by the
tlsClientParameters's configuration schema. The current schema does
not allow any bean referencing from within that structure. So, using
the http's spring or blueprint namespace handlers that are based on
this schema, you need to configure this entire structure. This makes
it difficult to use this configuration handler If you have your own
mechanism to get keystores and you can provide it as a bean or
factory-bean reference.

In such cases, one could directly configure the httpConduit and its
tlsClientParameter as beans directly. Unfortunately, this doesn't work
in blueprint because the blueprint bean element does not have the name
attribute that can be used to configure the conduit's matching
pattern.  So, this is not practical. Besides, I think it's pain to
configure beans directly when the specific namespace handlers are
available.

So what are the options? Is this an unusual use case?  If this is not
an unusual use case, should we add the reference attribute in some of
those elements so that these can be optionally configured separately
and referenced?

Your comments are appreciated.

Thanks.

Regards, Aki