Re: httpcomponents-client 4.5.3 - Certificate doesn't match any of the subject alternative names

2018-02-22 Thread Andy Signer
Hi Oleg, I raised https://issues.apache.org/jira/browse/HTTPCLIENT-1906 for this issue. Thanks a lot for your help! Bests Andy - To unsubscribe, e-mail: httpclient-users-unsubscr...@hc.apache.org For additional commands,

Re: httpcomponents-client 4.5.3 - Certificate doesn't match any of the subject alternative names

2018-02-22 Thread Oleg Kalnichevski
On Wed, 2018-02-21 at 17:14 +0100, Andy Signer wrote: > Hi Oleg, > > Thank you for your clarification. If I understood correctly the > Common > Name attribute is deprecated but still in use. The > DefaultHostnameVerifier is using it as a fallback if there is no > subjectAltName entry. > > > What

Re: httpcomponents-client 4.5.3 - Certificate doesn't match any of the subject alternative names

2018-02-21 Thread Andy Signer
Hi Oleg, Thank you for your clarification. If I understood correctly the Common Name attribute is deprecated but still in use. The DefaultHostnameVerifier is using it as a fallback if there is no subjectAltName entry. > What I would like to see is whether or not the subjectAltName attribute >

Re: httpcomponents-client 4.5.3 - Certificate doesn't match any of the subject alternative names

2018-02-21 Thread Oleg Kalnichevski
On Tue, 2018-02-20 at 22:51 +0100, Andy Signer wrote: > Hi everyone, > > Last week I ran into certificate verification error with > httpcomponents-client 4.5.3. A certificate was rejected with the > following message: > > javax.net.ssl.SSLPeerUnverifiedException: Certificate for > doesn't match