You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2026/06/11 14:29:37 UTC

[Bug 69988] certificateVerification="none" with CLIENT-CERT does not work

https://bz.apache.org/bugzilla/show_bug.cgi?id=69988

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
There are multiple aspects to this.

The first is that OpenSSL changed behaviour in 3.0.0 and stopped triggering the
events Tomcat was using to determine the PHA had completed. Hence why you see
Tomcat hanging waiting for more data from the client even through the client
has no more to send.

That has been fixed for the June releases (coming soon).

The second is that the above only works when the trust store is configured
using OpenSSL style configuration. I'm currently working on a possible solution
for when JSSE style configuration is used for the trust store.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org