<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 5/24/17 2:17 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:8EA992CE-E2EB-4F1A-85A8-F095F3666008@osu.edu">
<pre wrap="">I know I've asked before, but why do we have both of these?
#idp.httpclient.useTrustEngineTLSSocketFactory = false
#idp.httpclient.useSecurityEnhancedTLSSocketFactory = false
Near as I can tell, the former should be deprecated in favor of the latter?</pre>
</blockquote>
<br>
Yes, exactly. We shipped some earlier versions with the first one,
and later we changed it to the second one (the preferred socket
factory class changed names). So the first can completely go away
as soon as we can get rid of deprecated properties.<br>
<br>
I suppose it doesn't need to be in the commented out examples in
services.properties at this point. The only use of those is in
global-system.xml for wiring the property on HttpClient factory
beans:<br>
<br>
<tt>p:tLSSocketFactory="#{
%{idp.httpclient.useTrustEngineTLSSocketFactory:false} or
%{idp.httpclient.useSecurityEnhancedTLSSocketFactory:false} ?
@'shibboleth.SecurityEnhancedTLSSocketFactory' : null }"</tt><tt>
</tt><br>
<br>
<br>
I imagine we have to keep that Spring syntax there until 4.0.0,
right? Unless our policy on property deprecation is different than
in other places.<br>
<br>
<br>
</body>
</html>