Option to supply custom hostname verifier to HTTP client

Chris Hegarty chris.hegarty at oracle.com
Fri Nov 2 16:48:01 UTC 2018


Thanks for the additional information, we will review it.

For tracking purposes I filed the follow JIRA. It should not be confused
with a commitment to add such an API point, its resolution may indeed be
‘will not fix’, but it will contain a summary and record of the
discussion and ultimate conclusion ( which we'll post to the list too ).

https://bugs.openjdk.java.net/browse/JDK-8213309

-Chris.

> On 2 Nov 2018, at 15:47, Anders Wisch <anders at featureshock.com> wrote:
> 
> Regarding the dummy TrustManager point, in my experience trust and hostname verification are
> separate steps (at least in Java’s implementation of SSL). Here are some tests:
> 
> @Test
> public void selfSignedHostnameVerified() throws Exception {
>     ...


More information about the net-dev mailing list