You are viewing a plain text version of this content. The canonical link for it is here.
Posted to log4net-dev@logging.apache.org by "Stefan Bodewig (Updated) (JIRA)" <ji...@apache.org> on 2011/10/26 11:59:32 UTC
[jira] [Updated] (LOG4NET-315) SmtpAppender - Add support for
ignoring certificate errors
[ https://issues.apache.org/jira/browse/LOG4NET-315?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Bodewig updated LOG4NET-315:
-----------------------------------
Fix Version/s: (was: 1.2 Maintenance Release)
1.2.12
> SmtpAppender - Add support for ignoring certificate errors
> ----------------------------------------------------------
>
> Key: LOG4NET-315
> URL: https://issues.apache.org/jira/browse/LOG4NET-315
> Project: Log4net
> Issue Type: Improvement
> Components: Appenders
> Affects Versions: 1.2.11
> Reporter: Jim Scott
> Priority: Minor
> Fix For: 1.2.12
>
> Original Estimate: 2h
> Remaining Estimate: 2h
>
> As of 1.2.11 the SmtpAppender now has support for enabling smtp connections to use SSL. It is pretty common to have an SMTP server that is using a Self-Signed certificate which will fail the certificate validation. While you can override the certificate error on an application level to overcome this you might want to limit the ignoring of the certificate error just to the appender.
> Proposed Changes
> Add property that allows one to indicate they wish to ignore certificate failures.
> DisableCertificateValidation
> Add a line like this to SendBuffer method
> ServicePointManager.ServerCertificateValidationCallback += new RemoteCertificateValidationCallback(ValidateRemoteCertificate);
> Then create a call back method like so
> private bool ValidateRemoteCertificate(object sender,
> X509Certificate certificate,
> X509Chain chain,
> SslPolicyErrors policyErrors)
> {
> if(DisableCertificateValidation) return true;
>
> return policyErrors == null;
> }
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira