You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@thrift.apache.org by Isuru Haththotuwa <is...@gmail.com> on 2013/03/07 13:49:05 UTC

Disable Host Name Verification in Thrift C++ Client

Hi,

Is there a way to disable host name matching in SSL handshake in thrift?
I'm using a c++ thrift client.

-- 
Thanks and Regards,
Isuru

Re: Disable Host Name Verification in Thrift C++ Client

Posted by Isuru Haththotuwa <is...@gmail.com>.

Thanks, I already tried it and allowed everything by overriding all the
three methods. But still I get the same issue with certificate validation.
Any ideas on how to achieve this are highly appreciated.

On Thu, Mar 7, 2013 at 8:29 PM, Ben Craig <be...@ni.com> wrote:

> I haven't tested it, but you can probably implement your own AccessManager
> class (found in TSSLSocket.h), and pass an instance of that class to
> TSSLSocket::access().  Your implementation can ignore host name matching.
>
>
>
> From:   Isuru Haththotuwa <is...@gmail.com>
> To:     dev@thrift.apache.org, user@thrift.apache.org,
> Date:   03/07/2013 06:49 AM
> Subject:        Disable Host Name Verification in Thrift C++ Client
>
>
>
> Hi,
>
> Is there a way to disable host name matching in SSL handshake in thrift?
> I'm using a c++ thrift client.
>
> --
> Thanks and Regards,
> Isuru
>
>


-- 
Thanks and Regards,
Isuru

Re: Disable Host Name Verification in Thrift C++ Client

Posted by Ben Craig <be...@ni.com>.

I haven't tested it, but you can probably implement your own AccessManager 
class (found in TSSLSocket.h), and pass an instance of that class to 
TSSLSocket::access().  Your implementation can ignore host name matching.

From:   Isuru Haththotuwa <is...@gmail.com>
To:     dev@thrift.apache.org, user@thrift.apache.org, 
Date:   03/07/2013 06:49 AM
Subject:        Disable Host Name Verification in Thrift C++ Client

Hi,

Is there a way to disable host name matching in SSL handshake in thrift?
I'm using a c++ thrift client.

-- 
Thanks and Regards,
Isuru