Jump to content


Photo

IPNs with SSL but without global truststore


  • This topic is locked This topic is locked
2 replies to this topic

#1 ralfhauser

ralfhauser

    Newbie

  • Members
  • Pip
  • 4 posts

Posted 10 April 2005 - 11:57 AM

I managed to make it securely by creating a javax.net.ssl.SSLSocketFactory containing the paypal certificate and doing
...
URL u = new URL("https://www.paypal.com/cgi-bin/webscr");
HttpsURLConnection.setDefaultSSLSocketFactory(sf)
...
this, however, is not thread-safe because all other https url connections will get the same socketfactory.

Has anybody solved this?

Using
- org.apache.commons.httpclient.HttpClient
and their
- org.apache.commons.httpclient.contrib.ssl.AuthSSLProtocolSocketFactory appear to be a promising approach.

Any thoughts please to my email!

Reach me securely via:
https://www.privasph...=hauser@acm.org


#2 ralfhauser

ralfhauser

    Newbie

  • Members
  • Pip
  • 4 posts

Posted 10 April 2005 - 12:31 PM

see also http://issues.apache...ug.cgi?id=34391

#3 ralfhauser

ralfhauser

    Newbie

  • Members
  • Pip
  • 4 posts

Posted 02 May 2005 - 11:37 PM

for how to deal with certificate issues, see http://www.paypaldev...sp?TOPIC_ID=228




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users