In Jetty 9 - M5, SslContextFactory.java "customize" method had the following added:

        SSLParameters sslParams = sslEngine.getSSLParameters();
sslParams.setEndpointIdentificationAlgorithm(_endpointIdentificationAlgorithm);
        sslEngine.setSSLParameters(sslParams);

which appears to force host verification as per:

"EndpointIdentificationAlgorithm - when set to "HTTPS" hostname verification will be enabled"

What would be the setting to DISABLE hostname verification?

        Thanks, Erich

http://www.ebremer.com
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to