I have a need (no, not in production) to have an akka-based service contact 
another service using TLS where the remote service is using a self-signed 
cert.

I've used AkkaSSLConfig to configure the "loose" settings:

val looseConfig = SSLLooseConfig().withAcceptAnyCertificate(true).
  withDisableHostnameVerification(true).
  withAllowLegacyHelloMessages(Some(true)).
  withAllowUnsafeRenegotiation(Some(true)).
  withAllowWeakCiphers(true).
  withAllowWeakProtocols(true).
  withDisableSNI(true)


and despite trying all of the, still get the following exception when 
trying to access the remote service:

     sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target


It was my impression that the loose config:


    withAcceptAnyCertificate(true)


should have prevented the TLS implementation from trying to verify the 
cert. 


What am I missing?  What the the correct way to accept self-signed certs 
using akka-http's Http() client?


-- Eric





-- 
>>>>>>>>>>      Read the docs: http://akka.io/docs/
>>>>>>>>>>      Check the FAQ: 
>>>>>>>>>> http://doc.akka.io/docs/akka/current/additional/faq.html
>>>>>>>>>>      Search the archives: https://groups.google.com/group/akka-user
--- 
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/d/optout.

Reply via email to