rabbitmq-java-client icon indicating copy to clipboard operation
rabbitmq-java-client copied to clipboard

Enable server hostname verification by default for TLS connections

Open acogoluegnes opened this issue 6 years ago • 0 comments

This should be done as soon as the developer specifies a SSLContext or a TrustStore so with all the ConnectionFactory#useSslProtocol methods, except ConnectionFactory#useSslProtocol() and ConnectionFactory#useSslProtocol(String protocol) methods, where server checks are explicitly relaxed by using the TrustEverythingTrustManager.

Disabling server hostname verification could issue a warning, just like when using TrustEverythingTrustManager.

acogoluegnes avatar Dec 17 '18 13:12 acogoluegnes