Re: cxf ws client server certificate alternative name

2021-09-22 Thread Tóth Csaba
Thanx. This is working. Csaba On 2021-09-21 16:08, Freeman Fang wrote: Hi, You can specify certAlias name in Something like what_ever_suitable Hopefully this is what you are looking for. Cheers Freeman On Tue, Sep 21, 2021 at 9:50 AM Tóth Csaba wrote: Hello! For a webservice

Re: cxf ws client server certificate alternative name

2021-09-21 Thread Mark Presling
It should automatically check/use the SAN (Subject Alternate Name). I'm not aware of any special config for that. If you can, provide us with the following information: 1. endpoint address 2. output of "openssl s_client -connect cxf.apache.org:443 | openssl x509 -text -noout | grep -e

Re: cxf ws client server certificate alternative name

2021-09-21 Thread Freeman Fang
Hi, You can specify certAlias name in Something like what_ever_suitable Hopefully this is what you are looking for. Cheers Freeman On Tue, Sep 21, 2021 at 9:50 AM Tóth Csaba wrote: > Hello! > > For a webservice client, (over https) the server sent certificate has > wrong "name", but

cxf ws client server certificate alternative name

2021-09-21 Thread Tóth Csaba
Hello! For a webservice client, (over https) the server sent certificate has wrong "name", but it has an good "alternative name". I got javax.net.ssl.SSLHandshakeException: SSLHandshakeException. I have very basic conduit settings: