Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6586274

SSLSocketFactory and SSLServerSocketFactory can't be configured

    Details

    • Type: Enhancement
    • Status: Closed
    • Priority: P3
    • Resolution: Won't Fix
    • Affects Version/s: 6u2
    • Fix Version/s: 7
    • Component/s: security-libs
    • Labels:
      None

      Description

      Tha classes SSLSocketFactory and SSLServerSocketFactory are used to create SSL sockets. Quite often instances of these factory classes are passed into third-party libraries as a source of sockets. However, it isn't possible to control the operation of these classes without virtually recreating the entire SSL security provider mechanism, as instances of them can't be created directly - the factories are usually obtained in turn form an instance of SSLContext, which in turn is obtained from a static method (SSLContext.getInstance).

      There is already a class (SSLParameters) which can be used to control the behaviour of SSLEngines and individual sockets, via SSLEngine.setSSLParameters and SSLSocket.setSSLParameters. However there are no corresponding methods on either SSLSocketFactory or SSLServerSocketFactory. The appropriate getSSLParameters and setSSLParameter methods should be added.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                xuelei Xue-Lei Fan
                Reporter:
                alanbur Alan Burlison
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: