Hi all, I'd appreciate a review of https://github.com/apache/arrow-java/pull/1363. It closes #1319.
It adds an optional hostnameOverride connection property to the Flight SQL JDBC driver. With TLS on, the driver verifies the server certificate against that hostname and uses it for SNI and :authority. This lets users keep certificate verification on when connecting through SSH tunnels, private endpoints, or IP addresses, where today the only workaround is disableCertificateVerification=true. I addressed @jbonofre's requested change (blank values are now treated as unset) on Oct 16. Could your team take another look? Thanks, Fred
