You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by GitBox <gi...@apache.org> on 2020/06/09 16:19:00 UTC
[GitHub] [httpcomponents-client] nrv opened a new pull request #226: Disable SNI extension for a specific SSLConnectionSocketFactory
nrv opened a new pull request #226:
URL: https://github.com/apache/httpcomponents-client/pull/226
Some website have badly configured their SSL/TLS and it is not correctly managed by java, thus having an exception instead of simple warning : "javax.net.ssl.SSLHandshakeException: received handshake warning: unrecognized_name". This is a know problem for java > 8
The solution to bypass this problem is to disable the SNI extension but it could only be done at the JVM level with a -D option of programmatically with System.setProperty("jsse.enableSNIExtension", "false")
This patch allows to disable the SNI verification for a single SSLConnectionSocketFactory, as explained here : https://stackoverflow.com/questions/55903477/received-handshake-warning-unrecognized-name
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
[GitHub] [httpcomponents-client] ok2c commented on pull request #226: Disable SNI extension for a specific SSLConnectionSocketFactory
Posted by GitBox <gi...@apache.org>.
ok2c commented on pull request #226:
URL: https://github.com/apache/httpcomponents-client/pull/226#issuecomment-641189123
@nrv The trouble is that HC 5.0 still requires Java 1.7 compatible runtime. We cannot use 1.8 specific code in HttpClient 5.0 yet. We will likely upgrade to Java 1.8 in the 5.1 or 5.2 release.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
[GitHub] [httpcomponents-client] ok2c closed pull request #226: Disable SNI extension for a specific SSLConnectionSocketFactory
Posted by GitBox <gi...@apache.org>.
ok2c closed pull request #226:
URL: https://github.com/apache/httpcomponents-client/pull/226
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org