SocketFactory property duplication

Cantor, Scott cantor.2 at osu.edu
Wed May 24 21:27:35 EDT 2017


Brent, please review [1] when you have a moment, especially the warnings and suggestions around the way to apply these features to the system.

I couldn't come up with a good way to really explain this other than to suggest that the best thing is to configure it to fail deliberately and then flip the right switch to fix it. Otherwise it seems pretty risky to set up because once you toggle on the special SocketFactory, you leave the client wide open if there's no TrustEngine applied by the object using the client.

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP30/HttpClientConfiguration



More information about the dev mailing list