-
Notifications
You must be signed in to change notification settings - Fork 46
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
5 additions
and
4 deletions.
There are no files selected for viewing
9 changes: 5 additions & 4 deletions
9
modules/reference/pages/feature/transportSecurity/description.adoc
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,7 @@ | ||
When the Transport Security feature is enabled, the SSL context for the process is the default SSL context of the Java Secure Socket Extension (JSSE). | ||
The Transport Security feature supersedes the feature:ssl-1.0[display=Secure Socket Layer] (`ssl-1.0`) feature and adds functions that are not included with the `ssl-1.0` feature. | ||
|
||
When the `ssl-1.0` feature is enabled, the SSL context for the process is the default SSL context of the Java Secure Socket Extension (JSSE). | ||
Therefore, the `SSLContext.getDefault()` method returns the default SSL context of the JSSE. | ||
However, when this feature is enabled, Open Liberty also sets a custom SSL socket factory. | ||
However, when the Transport Security feature is enabled, Open Liberty also sets a custom SSL socket factory. | ||
Therefore, the `SSLSocketFactory.getDefault()` method returns an SSL socket factory that is based on the Open Liberty custom socket factory provider, which uses the Open Liberty SSL context instead of the JSSE default. | ||
|
||
The Transport Security feature supersedes the feature:ssl-1.0[display=Secure Socket Layer] (`ssl-1.0`) feature and adds functions that are not included with the `ssl-1.0` feature. Due to differences between the Transport Security feature and `ssl-1.0` in how the default Liberty `SSLContext` class is obtained, you might need to update your application code when you change from one feature to the other. For more information, see xref:ROOT:troubleshooting.adoc#ssl-tls[Troubleshooting SSL and TLS]. | ||
Due to these differences between the Transport Security feature and `ssl-1.0` in how the default Liberty `SSLContext` class is obtained, you might need to update your application code when you change from one feature to the other, or when you migrate from Java EE to Jakarta EE. For more information, see xref:ROOT:troubleshooting.adoc#ssl-tls[Troubleshooting SSL and TLS]. |