Option to supply custom hostname verifier to HTTP client

Chris Hegarty chris.hegarty at oracle.com
Thu Nov 1 17:53:42 UTC 2018


In order to evaluate this request, can you please provide
use-cases for such. What “secure” server are you trying
to connect to that is unwilling to identify itself in its
certificate.

-Chris.

> On 1 Nov 2018, at 17:48, Anders Wisch <anders at featureshock.com> wrote:
> 
> Hi all,
> 
> I think it should be possible to supply a custom javax.net.ssl.HostnameVerifier while building a
> java.net.http.HttpClient. While it is possible to disable standard hostname verification via the
> system property “jdk.internal.httpclient.disableHostnameVerification”, this doesn’t allow you to
> quarantine the behavior to a single HTTP client within the JVM.
> 
> Thanks for your consideration,
> Anders Wisch
> 
> 



More information about the net-dev mailing list