Hello:

Maybe this question a bit off topic , but I try to understand why my
client works.

I use CXF 2.7.8 to call a remote webservice by HTTPS (SSL /TLS)
This is my settings:

<http-conf:conduit name="https://.*";>
  <http-conf:tlsClientParameters>
  <sec:keyManagers keyPassword="xxxxxxxx">
        <sec:keyStore type="JKS" password="xxxxxxxx" resource="truststore.jks"/>
   </sec:keyManagers>

I've imported SSL server certificate into truststore.jks
And it works fine.

But this certificate is signed by a CA chain ( from .godaddy.com)  ,
and ( I think ) I don't have imported any certificate from godaddy
Why does my client trust in the server certificate ?
Is not  performed some Certification Path Validation process ?

Thanks and regards

Reply via email to