Skip to content

ApacheFhirSecurityInformation does not honor a configured HostnameVerifier #524

Description

@ohr

Without an explicit policy, DefaultClientTlsStrategy uses HostnameVerificationPolicy.BOTH, i.e. JSSE verifies the hostname during the handshake and fails before a configured HostnameVerifier (e.g. NoopHostnameVerifier) is ever consulted. A configured verifier must therefore be made authoritative with HostnameVerificationPolicy.CLIENT

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

Projects

No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions