api-layer
api-layer copied to clipboard
Support verifySslCertificatesOfServices parameter for ZAAS client
Is your feature request related to a problem? Please describe.
I want to test my service with API ML without the need to set up valid certificates. I am able to use verifySslCertificatesOfServices = false
when onboarding but it does not work with the ZAAS client.
Describe the solution you'd like
Add the possibility of not validating certificates to the ZAAS client. Reuse parameter verifySslCertificatesOfServices
that works well for onboarding.
Note: The ZAAS already supports nonStrictVerifySslCertificatesOfServices
parameter which is also helpful in this situation. However, when set, the verifySslCertificatesOfServices
is ignored during onboarding and my service does not register into APIML.
The problem is still there. Actually, it seems working even less than before.
When you intentionally remove the trust of Discovery Service from the client service, verifySslCertificatesOfServices disabled (on the service level) does not allow you to onboard. This is documented in https://docs.zowe.org/stable/extend/extend-apiml/onboard-plain-java-enabler/#api-security.
Idea: It seems that we set trustsore to trust every connection that is correct. But we also set the empty keystore which is probably wrong.