SecurityEnhancedTLSSocketFactory with teardown on used socket context ...

[Petra Berg]

Hi All,

While updating my IdP data connector  from my own format into type 
'HTTP', I found a problem using client authentication.

Configuring goes well with referencing a httpClientRef with 
httpClientSecurityParametersRef. In the log file all configurations are ok.
If the Authn-Request comes in, authentication is not affected, but data 
resolver doesn't work. Reason for this is, that the underlying 
TLS-socket is created and connected correctly (with client 
authentication), but after returning the socket to the data connector, 
the factory class call a teardown(context), which affect the socket to 
release all client certificate configurations. The following data 
resolver request fails because of missing client authentication.

If I remove the teardown(context) in finally block of 
org.opensaml.security.httpclient.impl.SecurityEnhancedTLSSocketFactory.connectSocket() 
it works fine.
So my question is, why is the teardown(context) function called on a 
context, just installed on a working socket?

Do I miss something?

Best regards,
Petra Berg

-- 
___________________________________________________________________

Petra Berg                          Humboldt-Universitaet zu Berlin
Tel.: +49 (0)30-2093 70155          ZE Computer- und Medienservice
Fax:  +49 (0)30-2093 70135          Unter den Linden 6
petra.berg at cms.hu-berlin.de         D-10099 Berlin
___________________________________________________________________


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5411 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20190528/eaea365d/attachment.p7s>