hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oleg Kalnichevski (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HTTPCLIENT-1349) SSLSocketFactory incorrectly identifies key passed with keystore as the keystore password.
Date Fri, 03 May 2013 14:52:16 GMT

     [ https://issues.apache.org/jira/browse/HTTPCLIENT-1349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Oleg Kalnichevski updated HTTPCLIENT-1349:
------------------------------------------

    Affects Version/s:     (was: 4.2.6)
        Fix Version/s: 4.2.6

A sample key store and a test case based on it would in fact be quite nice.

Oleg
                
> SSLSocketFactory incorrectly identifies key passed with keystore as the keystore password.
> ------------------------------------------------------------------------------------------
>
>                 Key: HTTPCLIENT-1349
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1349
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: HttpClient
>    Affects Versions: 4.2.4, 4.2.5
>            Reporter: David Graff
>            Priority: Minor
>             Fix For: 4.2.6
>
>         Attachments: httpclient-4.2.x-SSLSocketFactory-keypassword.patch
>
>
> The constructor signatures for SSLSocketFactory incorrectly identify the password passed
as the keystore password. The password passed is, in fact, used by the key manager for private
key recovery. If the keystore has one password and the private key has a different password
this method will fail if only using the keystore password.
> I have attached a patch to this covering the changes to this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message