CODEWITHSUNDEEP
javasecurityhttps
DarthVader
DarthVader

Reputation: 55022

Apache Commons HttpClient for HTTPS call

Does HttpClient uses cacerts that is available in every JRE? do i need to configure the HttpClient with SSL to invoke a HTTPS endpoint.

The endpoint uses GeoTrust which is a trusted authority by cacerts withing JRE. Does HttpClient handle the security?

Upvotes: 0

Views: 723

Answers (2)

Isaac
Isaac

Reputation: 16736

There is nothing in the Commons HttpClient API that allows a developer custom control over SSL parameters. You don't need to configure Commons HttpClient specifically; HttpClient will delegate SSL verification and so forth to whatever Java-standard SSL sockets use. That, in turn, will end up in your JRE's cacerts file being inquired for CA validation.

Upvotes: 1

hd1
hd1

Reputation: 34657

Yes, it does, according to the website. If you have JSSE installed and all JDKs after 1.4 come with it out of the box, SSL works with the httpclient library (any version) just as you would with any other request.

Upvotes: 1

Related Questions