Re: [jetty-users] Jetty 9.0.0.M5 issue

[Thomas Becker <tbecker@xxxxxxxxxxx>]

Hi Erich,

you can simply disable it by calling:
SslContextFactory.setEndpointIdentificationAlgorithm("");

We went for the securest option by default.

Cheers,
Thomas

Am 1/22/13 11:42 PM, schrieb Erich Bremer:
> In Jetty 9 - M5, SslContextFactory.java "customize" method had the
> following added:
>
>          SSLParameters sslParams = sslEngine.getSSLParameters();
> sslParams.setEndpointIdentificationAlgorithm(_endpointIdentificationAlgorithm);
>
>          sslEngine.setSSLParameters(sslParams);
>
> which appears to force host verification as per:
>
> "EndpointIdentificationAlgorithm - when set to "HTTPS" hostname
> verification will be enabled"
>
> What would be the setting to DISABLE hostname verification?
>
>          Thanks, Erich
>
> http://www.ebremer.com
> _______________________________________________
> jetty-users mailing list
> jetty-users@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/jetty-users