Does ews-java-api support TLS 1.2?

[xsun12]

No description provided.

[pheenomenon]

looked at the method inside ExchangeServiceBase.java, it does not seem to use System properties to read the JVM parameters while initializing.
Also, the HttpClientBuilder.build() method inside httpclient-4.4.1.jar has a check to read "-Dhttps.protocol" only when ConnectionManager is null.

From what I can tell it ews-java-api does not support TLSv1.2, even if passed in JVM parameters.
Wondering if experts can comment more. @serious6

private void initializeHttpClient() {
Registry registry = createConnectionSocketFactoryRegistry();
HttpClientConnectionManager httpConnectionManager = new BasicHttpClientConnectionManager(registry);
AuthenticationStrategy authStrategy = new CookieProcessingTargetAuthenticationStrategy();

httpClient = HttpClients.custom()
  .setConnectionManager(httpConnectionManager)
  .setTargetAuthenticationStrategy(authStrategy)
  .build();

}

[pheenomenon]

@vbauer Vladislav wondering what your thoughts are on the approach to provide a fix. Few options are:
1] stop setting ConnectionManager and set useSystemProperties() while building HttpClients, in which case HttpClientBuilder will invoke the code to read systemProperties.
reuseStrategyCopy = new SSLConnectionSocketFactory((SSLSocketFactory)SSLSocketFactory.getDefault(), keepAliveStrategyCopy, targetAuthStrategyCopy, (HostnameVerifier)proxyAuthStrategyCopy);

2] Another approach is to update EwsSSLProtocolSocketFactory build to as follows.
`public static EwsSSLProtocolSocketFactory build(
TrustManager trustManager, HostnameVerifier hostnameVerifier
) throws GeneralSecurityException {
SSLContext sslContext = createSslContext(trustManager);

//start
String[] keepAliveStrategyCopy = split(System.getProperty("https.protocols"));
String[] targetAuthStrategyCopy = split(System.getProperty("https.cipherSuites"));
System.out.println("https.cipherSuites : " + keepAliveStrategyCopy + targetAuthStrategyCopy );
//end
if(null != keepAliveStrategyCopy) {
  return new EwsSSLProtocolSocketFactory(sslContext,keepAliveStrategyCopy,targetAuthStrategyCopy, hostnameVerifier);
} else {
  return new EwsSSLProtocolSocketFactory(sslContext, hostnameVerifier);
}

}`