1

I am looking for an open source XML-RPC client for my application to use to talk to XML-RPC servers.

The application currently uses Apache XML-RPC 3.1.3, however this has several CVEs recorded against it, and does not appear to be in active development (it is listed as an archived project on this page).

The library needs to support TLS with a customisable SSL context.

Improve this question
6
  • XML RPC is AFAIK an outdated technology, usually SOAP is used instead. Are you sure you can't use SOAP?
    – Robert
    Commented Sep 16, 2021 at 10:02
  • Thanks, I wasn't aware XML-RPC was so outdated. I'm not able to influence the interface exposed by the servers, unfortunately.
    – PMah
    Commented Sep 16, 2021 at 12:33
  • How complex is the interface? If it is rather simple and don't have many methods you can just generate the XML DOM for a request yourself.
    – Robert
    Commented Sep 16, 2021 at 13:09
  • It's not very complex, so I suppose that is an option. I was hoping not to have to roll my own though, especially as organisations like Apache haven't managed to make theirs totally secure.
    – PMah
    Commented Sep 16, 2021 at 13:50
  • Vulnerabilities usually are created by configuration options and variants. If you don't support the and instead just parse the dom and extract information from it what should go wrong? Also the server side is way more fragile as the client side.
    – Robert
    Commented Sep 16, 2021 at 13:54

1 Answer 1

Reset to default
0

So the only open sorce alternative to apache one seems to be aXMLRPC.

Improve this answer
2
  • While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. - From Review
    – Chenmunka
    Commented Jan 4, 2022 at 21:29
  • @Chenmunka Shuld I just copy the readmee?
    – convert
    Commented Jan 11, 2022 at 20:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.