Skip to content

Commit

Permalink
edits per review
Browse files Browse the repository at this point in the history
  • Loading branch information
dmuelle committed Oct 9, 2023
1 parent b339257 commit b2c3a4c
Showing 1 changed file with 5 additions and 4 deletions.
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
When the Transport Security feature is enabled, the SSL context for the process is the default SSL context of the Java Secure Socket Extension (JSSE).
The Transport Security feature supersedes the feature:ssl-1.0[display=Secure Socket Layer] (`ssl-1.0`) feature and adds functions that are not included with the `ssl-1.0` feature.

When the `ssl-1.0` feature is enabled, the SSL context for the process is the default SSL context of the Java Secure Socket Extension (JSSE).
Therefore, the `SSLContext.getDefault()` method returns the default SSL context of the JSSE.
However, when this feature is enabled, Open Liberty also sets a custom SSL socket factory.
However, when the Transport Security feature is enabled, Open Liberty also sets a custom SSL socket factory.
Therefore, the `SSLSocketFactory.getDefault()` method returns an SSL socket factory that is based on the Open Liberty custom socket factory provider, which uses the Open Liberty SSL context instead of the JSSE default.

The Transport Security feature supersedes the feature:ssl-1.0[display=Secure Socket Layer] (`ssl-1.0`) feature and adds functions that are not included with the `ssl-1.0` feature. Due to differences between the Transport Security feature and `ssl-1.0` in how the default Liberty `SSLContext` class is obtained, you might need to update your application code when you change from one feature to the other. For more information, see xref:ROOT:troubleshooting.adoc#ssl-tls[Troubleshooting SSL and TLS].
Due to these differences between the Transport Security feature and `ssl-1.0` in how the default Liberty `SSLContext` class is obtained, you might need to update your application code when you change from one feature to the other, or when you migrate from Java EE to Jakarta EE. For more information, see xref:ROOT:troubleshooting.adoc#ssl-tls[Troubleshooting SSL and TLS].

0 comments on commit b2c3a4c

Please sign in to comment.