SOAP Client: Client TLS credential selection

[Brent Putman]

On 5/13/15 7:25 PM, Cantor, Scott wrote:
>
> I was thinking not only things like other credential types, but even SSL 
> cipher suites for example. I'd have to look at the various options I 
> supported, but there are a bunch of properties like timeouts and such that 
> I allowed to be per-RP.


Ah.  HC has various things that can be specified on a per-request
basis.  However, I doubt TLS cipher suites is going to be possible
there.  That is buried down in the JSSE layer and I don't think there
is any interface that lets you dynamically select the SSLContext, from
which the socket factories are produced.  I'll take another look, but I
think it's pretty much 1 SSLContext per HttpClient instance
(technically per SSLConnectionSocketFactory, but same thing).

If we need to support that level of per-RP configurability, then the
whole SOAP client might have to be the unit of configuration.


>>  Going the "resolve the SOAP client" route would also address this.
> Maybe it's the simpler path, yes.

It's starting to sound more attractive...