Details
Description
In NEXUS-5526, a change was made to allow javax.net.* system properties to be set on the HTTP Client embedded within Nexus.
We have since regressed back to not allowing this:
And the attempt to backout changes did not restore use of the System connection factory method:
In Nexus 2.8.0-05 we started including httpclient 4.3.x into Nexus. httpclient 4.3.x system SSLSocketFactory started honouring https.protocols and https.ciphersuites - however in 2.8 our regression prevents setting protocols and ciphers on outbound connections from being an option for end users.
So two problems:
- it seems we have regressed honouring system properties that influence the outbound http connections
- we don't expose a way to set https protocols and ciphers preferences on Nexus outbound connections ( https.protocols / https.ciphersuites )
Expected
- make Nexus use the system socket factories provided by http client, so that standard javax.net system properties can influence outbound connections
Attachments
Issue Links
- is depended on by
-
NEXUS-7659 disable SSLv3 for outbound requests by default
-
- Closed
-
- is related to
-
NEXUS-7659 disable SSLv3 for outbound requests by default
-
- Closed
-