Can the SOAPClient action support SSL?

[jslowry]

Hi,

There was a thread a while back that questioned the ESB's ability to support SSL when using the SOAPClient action. It can be found here:

http://www.jboss.com/index.html?module=bb&op=viewtopic&t=111852

Unfortunately for me, there was no answer posted regarding this topic. I'm in the same boat, and I need to know if it can be done. If so, any idea how?

Thanks so much!

[tfennelly]

Sorry... what exactly is your issue? A solution to the Http BASIC auth issue was posted/linked-to on that thread. Was it something else you were looking for?

[jslowry]

Sorry about that. To be more specific, I was wondering how I would send the credentials through the ESB. I know that the SOAPClient code is based on HttpClient, and I know they have support for SSL, but I don't know if there's an obvious way to send the credentials through the jboss-esb.xml file. Any ideas?

[tfennelly]

Have you read the "HttpClient Configuration" section described here. Drill into the HttpClientFactory page that's linked from there.

If this is still not relevant I'm afraid you'll need to be even more specific i.e. tell us exactly which HttpClient configurations you're trying to make. I recently made some HttpClientFactory enhancements around ProtocolSocketFactory configuration through the HttpProtocol Configurator. These might be relevant, depending on what exactly you're looking for.

[jslowry]

I should also add that it's 2-way SSL. I've started looking into the HttpClient guides and sample code, but I'm not sure I've figured out how to do the 2-way SSL yet.

[tfennelly]

OK, in that case I think you're going to need the changes on the tfennelly_https workspace branch. Diff the branch and you'll see the changes I made. The main one being the addition of support for a ProtocolSocketFactoryBuilder, with 2 impls provided... one for the AuthSSLProtocolSocketFactory and one for a new ProtocolSocketFactory called SelfSignedSSLProtocolSocketFactory (very similar to the EasySSLProtocolSocketFactory provided with HttpClient, diff being it allows you do 2way ssl with with unsigned certs).

There's a quickstart there that you can take a look at. It's called "https_2way_ssl". It doesn't use the SOAPClient. It uses a new HttpRouter action, which uses the HttpClientFactory, so the same changes will work for the SOAPClient. The "https_2way_ssl" quickstart is using the JBR listener as the https server.