Enable Mutual SSL Authentication
See original GitHub issueIt seems that the current implentations for SSL request do not support Mutual SSL authentication. Current outgoing requests do not use the javax.net.ssl.keyStore when making requests, which prevents the 2-way ssl handshake from going through.
The Apache ApacheHttpTransport (UPDATE: this should really have been referred to v2 ApacheHttpTransport, although the same question applies to v1. see https://github.com/googleapis/google-http-java-client/issues/904#issuecomment-564625366) not using getSystemSocketFactory. That version takes into account the javax.net.ssl properties, and would most likely allow for the 2way ssl connection to complete. Is there a reason this is not being used?
Issue Analytics
- State:
- Created 4 years ago
- Comments:5 (4 by maintainers)
Top Results From Across the Web
How to Set Up Mutual TLS Authentication to Protect Your ...
Mutual authentication ? How does that work? It involves creating your own Certification Authority, self-signing the server and client certificate ...
Read more >Configure Mutual SSL Authentication - Tableau Help
Under Mutual SSL, select Use mutual SSL and automatic sign in with client certificates. Click Select File and upload your certificate authority (CA)...
Read more >Mutual TLS: Stuff you should know - DocuSign
To enable Mutual TLS, check the Enable Mutual TLS option in the DocuSign Admin tool for your Connect configuration. If you're programmatically ...
Read more >How does SSL mutual authentication work?
A browser connecting to the secure server will use the SSL protocol to connect and verify the server's certificate. However, customers can also...
Read more >Enable Mutual (Two-Way) Certificate Authentication
Enable Mutual (Two-Way) Certificate Authentication ... This mode uses SSL and enables both Server authentication by the Probe and client authentication by the ......
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

This should be available in 1.38.0
In any case, I think the general question as to whether it should have used
getSystemSocketFactoryremains valid regardless of v1 or v2. Although I haven’t looked into the code, but if what @atgjack said is right, perhaps this library should use the system socket factory?