ssl-config
ssl-config copied to clipboard
SSLLooseConfig.acceptAnyCertificate does not allow expired certs
When acceptAnyCertificate(true) I get a cert expired exception. Below is a list of the causes from the stack trace. SSLHandshakeException: General SSL Engine Problem Validator Exception: PKIX path validation failed CertPathValidator Exception: validity check failed CertificateExpiredException: NotAfter ....
This may be related to #69
I don't think acceptAnyCertificate ever made any promises about accepting expired certificates -- only that it would accept certificates that would fail an identity check.
It's a decision to be made. Let's make the decision and add it to the documentation.