search

eclipse-ee4j / tyrus

Tyrus
Other
115 stars 37 forks source link

javax.websocket.Session#isSecure() is always false #625

Open sco0ter opened 6 years ago

sco0ter commented 6 years ago

When a client initiates a secure session to a "wss" WebSocket server endpoint, the session#isSecure() method always returns false, although it's in fact secure.

The server side counterpart is working fine. (Wildfly 11, it's Tyrus, too).

I am initiating the SSL context with:

SslEngineConfigurator sslEngineConfigurator = new SslEngineConfigurator(getSSLContext());
client.getProperties().put(ClientProperties.SSL_ENGINE_CONFIGURATOR, sslEngineConfigurator);
polarapfel commented 6 years ago

I noticed the same. I am connecting to an API service endpoint. Looking at the communication going back and forth between server and Tyrus client in Wireshark, I can clearly see that traffic is encrypted.