Return-Path: X-Original-To: apmail-cxf-users-archive@www.apache.org Delivered-To: apmail-cxf-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 9EAF018AF1 for ; Thu, 25 Jun 2015 10:55:05 +0000 (UTC) Received: (qmail 11659 invoked by uid 500); 25 Jun 2015 10:55:05 -0000 Delivered-To: apmail-cxf-users-archive@cxf.apache.org Received: (qmail 11584 invoked by uid 500); 25 Jun 2015 10:55:05 -0000 Mailing-List: contact users-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cxf.apache.org Delivered-To: mailing list users@cxf.apache.org Received: (qmail 11565 invoked by uid 99); 25 Jun 2015 10:55:04 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Jun 2015 10:55:04 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of sberyozkin@gmail.com designates 209.85.212.171 as permitted sender) Received: from [209.85.212.171] (HELO mail-wi0-f171.google.com) (209.85.212.171) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Jun 2015 10:52:48 +0000 Received: by wicnd19 with SMTP id nd19so14129567wic.1 for ; Thu, 25 Jun 2015 03:54:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=GiqVUNudjGF8Kk/r8weawdBh/GkoXA0n274xxrtWbJU=; b=uYOS6bgpwen5OKhk+b8zmolvw7tz8CtHkzrV9yGwg+ueWk6Zc0kbfDwMg7nxoP4ice s/3Wda4uxvV0JMsQ3qV/7vCESZmjWsGhkjOSehoFZI+iOdoiT7VTymcVl7YEUV+L0dIi fxiO7B+X2SYjsGOdl9usk0J7/BwlwBQNdWNGj27LAwjoLWY5JJXQlan9EUTWC9f7c8Qp evy73Bjk6pbAzsZsoxWEBwYMIlDXY6ZlCSg6GP4NQGuKirxBZ0kNF+SFl7KfzEFlb+qt 3+iuoJ1mf1+ycLEEe1991XwrOWRJkN70SZzRKfWL247kIe25WwgzrudZRir9kBuse3P/ ruXA== X-Received: by 10.194.179.200 with SMTP id di8mr79772873wjc.56.1435229677006; Thu, 25 Jun 2015 03:54:37 -0700 (PDT) Received: from [10.36.226.2] ([80.169.137.63]) by mx.google.com with ESMTPSA id kc4sm45044599wjc.2.2015.06.25.03.54.35 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 25 Jun 2015 03:54:36 -0700 (PDT) Message-ID: <558BDDD2.3010502@gmail.com> Date: Thu, 25 Jun 2015 11:54:10 +0100 From: Sergey Beryozkin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: users@cxf.apache.org Subject: Re: problems using CXF as a JAX-RS 2.0 client References: <1050773444.919339.1435227115537.JavaMail.yahoo@mail.yahoo.com> In-Reply-To: <1050773444.919339.1435227115537.JavaMail.yahoo@mail.yahoo.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Hi You could've just posted a link to CXF-6475 to make it easier to read this message. I do not see where the issue is. HttpConduit logging is a bit confusing indeed because there's a number of attempts to set TLS client parameters but it does not mean that HTTPS is not used. Can you trace the content of the request in a plain tcp trace utility ? I'd say that no. 301 vs 200 does not mean it is not HTTPS. The clue should be on the server side. Why 301, perhaps CXF produces a slightly different URI compared to Jersey ? Does the server depend on the order of the query parameters ? Please investigate and let me know Sergey On 25/06/15 11:11, LBC wrote: > hi, > I'm having problems establishing a secure connection using CXF/JVM defaults. Hopefully it's just a simple configuration issue. Below is the generic JAX-RS 2.0 code, along with the associated Maven dependency, and the log output demonstrating the problem. Even though I'm specifying a "https" URL, it seems CXF is making the request via HTTP and thus yielding a 301 HTTP response code. I'm running on JDK 7 (jdk1.7.0_51). I've tried CXF 3.0.2, 3.0.3, and 3.1.1. All yield a similar result. Running the same test with the Jersey 2.x JAX-RS client yields the correct 200 HTTP response code. > thanks,--Lawrence