[akka-user][deprecated] Re: [akka-user] Disable hostname verification

I have a single use case where I'm calling *Http().singleRequest* and I'd like to disable the host verification. I've tried: val badSslConfig: AkkaSSLConfig = AkkaSSLConfig().mapSettings(s => s.withLoose(s.loose.withDisableSNI(true))) val badCtx: HttpsConnectionContext =

Re: [akka-user] Disable hostname verification

Got it thanks! On Wednesday, March 15, 2017 at 4:25:13 AM UTC-5, Konrad Malawski wrote: > > Read the docs: > > http://doc.akka.io/docs/akka/current/scala/http/client-side/https-support.html#Hostname_verification > > You should also force the SSL Config library to be 0.2.2 >

Re: [akka-user] Disable hostname verification

Read the docs: http://doc.akka.io/docs/akka/current/scala/http/client-side/https-support.html#Hostname_verification You should also force the SSL Config library to be 0.2.2 -- Konrad `ktoso` Malawski

Re: [akka-user] Disable hostname verification

Hi Team, How do we disable Host verification using Akka http? Getting below exception. akka.stream.ConnectionException: Hostname verification failed! Code: http.setDefaultClientHttpsContext(HttpsConnectionContext.https(context)); conSecure = ConnectHttp.toHostHttps(properties.getHost(),

Re: [akka-user] Disable hostname verification

Hi Roland, > I don’t agree: if you write a program that shall have certain security > characteristics, then you must certainly test it under the same constraints > that you will run it with in production. Otherwise you run something that > you have not tested. How would you test the failure

Re: [akka-user] Disable hostname verification

Hi Michael, > 19 feb 2016 kl. 17:33 skrev Michi : > > I documented it here: https://github.com/mthaler/akka-http-test/ > > I can open a ticket later. What is a PR? > > I think it would be useful for test-code to keep the option to disable > certificate /

Re: [akka-user] Disable hostname verification

The issue with security is always that if you make something convenient, even for testing, then somehow it ends up in production :( -Endre On Fri, Feb 19, 2016 at 5:33 PM, Michi wrote: > I documented it here: https://github.com/mthaler/akka-http-test/ > >

Re: [akka-user] Disable hostname verification

I documented it here: https://github.com/mthaler/akka-http-test/ I can open a ticket later. What is a PR? I think it would be useful for test-code to keep the option to disable certificate / hostname validation. For tests that only run on localhost security is not an issue at all. Running

Re: [akka-user] Disable hostname verification

Hi Konrad, thanks for the quick reply, that works! Out of curiosity: is there a way to do this on a per connection basis? Best regards, Michael On Friday, February 19, 2016 at 4:55:56 PM UTC+1, Konrad Malawski wrote: > > Hi, > Have you tried setting akka.ssl-config.hostnameVerifierClass to

Re: [akka-user] Disable hostname verification

Yeah, I guess you're right that we should document that instead. We talked with Will that in ssl-config we'll want to remove all the "loose" settings (including disabling this check), so documenting with that in mind probably makes more thanks. --  Cheers, Konrad 'ktoso’ Malawski Akka @ 

Re: [akka-user] Disable hostname verification

Currently there isn't a way to do this per connection. In general we'd prefer to not make disabling these kinds of checks actually, but I know that's not a very popular statement. Could you open a ticket or submit a PR that documents how to do this using the current scheme? Thanks a lot in

[akka-user] Disable hostname verification

Hi, I have written a small HTTPS test server and client and now I try to disable hostname verification. Here is the code: object HttpsServer extends App { implicit val system = ActorSystem("system") implicit val mat = ActorMaterializer() implicit val ec = system.dispatcher val