Skip to content

Enable server hostname verification by default for TLS connections #432

Open
@acogoluegnes

Description

@acogoluegnes

This should be done as soon as the developer specifies a SSLContext or a TrustStore so with all the ConnectionFactory#useSslProtocol methods, except ConnectionFactory#useSslProtocol() and ConnectionFactory#useSslProtocol(String protocol) methods, where server checks are explicitly relaxed by using the TrustEverythingTrustManager.

Disabling server hostname verification could issue a warning, just like when using TrustEverythingTrustManager.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions