davsclaus commented on code in PR #28188: URL: https://github.com/apache/camel/pull/28188#discussion_r4326353595
########## components/camel-ftp/src/main/docs/ftp-component.adoc: ########## @@ -80,6 +80,23 @@ include::partial$component-endpoint-headers.adoc[] == Usage +=== FTPS host name verification + +The FTPS client that Camel creates does not check that the certificate of the server matches the host of the endpoint: +any certificate accepted by the trust manager is accepted, whatever host it was issued for. To enable the check, set +`ftpClient.endpointCheckingEnabled=true` on the endpoint. The check uses the same rules as an HTTPS client, so a +connection to an IP address needs a certificate that lists that address as a subject alternative name. Review Comment: Nit: this covers the control connection only; the data connection (`PROT P`) is not checked by host name in commons-net. Maybe add "on the control connection". -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
