[Axis2} - Upgrade to TLS1.2 with Axis2 1.5

[Ashish Mantri]

Hi,

As part of my project we are upgrading to TLS1.2, currently I am using
Axis2 version 1.5.
I wan't to know if TLS1.2 will be supported with Axis2 1.5 or I will need
to update Axis2.

Thanks in advance.

Ashish Mantri

[robertlazarski .]

On Nov 6, 2017 12:24 AM, "Ashish Mantri" <***@gmail.com> wrote:

Hi,

As part of my project we are upgrading to TLS1.2, currently I am using
Axis2 version 1.5.
I wan't to know if TLS1.2 will be supported with Axis2 1.5 or I will need
to update Axis2.

Thanks in advance.

Ashish Mantri


1.5 is no longer supported, any problems should be tested against the
latest release - currently 1.7.6 .

That being said ... your web server or load balancer typically would handle
the TLS layer. If you have set up your axis2.xml to listen on port 443 or
8443, I suggest you test with the latest axis2 version.

[Ashish Mantri]

Hi,

Thanks for your response, but i am currently only using axis2 to generate client side code.’

Sent from my iPhone

Hi,
As part of my project we are upgrading to TLS1.2, currently I am using Axis2 version 1.5.
I wan't to know if TLS1.2 will be supported with Axis2 1.5 or I will need to update Axis2.
Thanks in advance.
Ashish Mantri
1.5 is no longer supported, any problems should be tested against the latest release - currently 1.7.6 .
That being said ... your web server or load balancer typically would handle the TLS layer. If you have set up your axis2.xml to listen on port 443 or 8443, I suggest you test with the latest axis2 version.

[robertlazarski .]

Post by Ashish Mantri
Hi,
Thanks for your response, but i am currently only using axis2 to generate
client side code.’
Sent from my iPhone

Are you using client certificates with axis2 via javax.net.ssl.SSLContext?
You will have to explain your code better.

If any event, you will have to test your code with the latest axis2
releases.

[Ashish Mantri]

Hi,

I generated the client code using commands and using client stub to invoke
the WS.
In code there is no handling of SSLContext.

Thanks and Regards,
Ashish Mantri

Post by robertlazarski .

Post by Ashish Mantri
Hi,
Thanks for your response, but i am currently only using axis2 to generate
client side code.’
Sent from my iPhone

Are you using client certificates with axis2 via javax.net.ssl.SSLContext?
You will have to explain your code better.
If any event, you will have to test your code with the latest axis2
releases.

[Thorsten Schöning]

Guten Tag Ashish Mantri,

As part of my project we are upgrading to TLS1.2, currently I am using Axis2 version 1.5.
I wan't to know if TLS1.2 will be supported with Axis2 1.5 or I will need to update Axis2.

You should upgrade, I internally consider my Axis2 1.6.x not fully TLS
compatible myself and already ran into problems like no support for
SNI. There might be some workarounds available, though:

https://stackoverflow.com/questions/32587141/how-to-force-commons-httpclient-3-1-to-use-tls-1-2-only-for-https?noredirect=1&lq=1
https://issues.apache.org/jira/browse/HTTPCLIENT-1119

Mit freundlichen Grüßen,

Thorsten Schöning
--
Thorsten Schöning E-Mail: ***@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/

Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow


---------------------------------------------------------------------
To unsubscribe, e-mail: java-user-***@axis.apache.org
For additional commands, e-mail: java-user-***@axis.apache.org