0

I am looking for an open source XML-RPC client for my application to use to talk to XML-RPC servers.

The application currently uses Apache XML-RPC 3.1.3, however this has several CVEs recorded against it, and does not appear to be in active development (it is listed as an archived project on this page).

The library needs to support TLS with a customisable SSL context.

5
  • XML RPC is AFAIK an outdated technology, usually SOAP is used instead. Are you sure you can't use SOAP?
    – Robert
    Sep 16 at 10:02
  • Thanks, I wasn't aware XML-RPC was so outdated. I'm not able to influence the interface exposed by the servers, unfortunately.
    – PMah
    Sep 16 at 12:33
  • How complex is the interface? If it is rather simple and don't have many methods you can just generate the XML DOM for a request yourself.
    – Robert
    Sep 16 at 13:09
  • It's not very complex, so I suppose that is an option. I was hoping not to have to roll my own though, especially as organisations like Apache haven't managed to make theirs totally secure.
    – PMah
    Sep 16 at 13:50
  • Vulnerabilities usually are created by configuration options and variants. If you don't support the and instead just parse the dom and extract information from it what should go wrong? Also the server side is way more fragile as the client side.
    – Robert
    Sep 16 at 13:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.