Hi Erich,

you can simply disable it by calling:
SslContextFactory.setEndpointIdentificationAlgorithm("");

We went for the securest option by default.

Cheers,
Thomas

Am 1/22/13 11:42 PM, schrieb Erich Bremer:
In Jetty 9 - M5, SslContextFactory.java "customize" method had the
following added:

         SSLParameters sslParams = sslEngine.getSSLParameters();
sslParams.setEndpointIdentificationAlgorithm(_endpointIdentificationAlgorithm);

         sslEngine.setSSLParameters(sslParams);

which appears to force host verification as per:

"EndpointIdentificationAlgorithm - when set to "HTTPS" hostname
verification will be enabled"

What would be the setting to DISABLE hostname verification?

         Thanks, Erich

http://www.ebremer.com
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to