Skip to content

Use the supported SSLSession accessor for the peer certificate chain - #121

Open
ThisaraWeerakoon wants to merge 2 commits into
apache:masterfrom
ThisaraWeerakoon:fix/nhttp-revocation-peer-certificate-api
Open

ThisaraWeerakoon wants to merge 2 commits into
apache:masterfrom
ThisaraWeerakoon:fix/nhttp-revocation-peer-certificate-api

Conversation

@ThisaraWeerakoon

Copy link
Copy Markdown
Contributor

CertificateRevocationVerifier is an opt-in transport parameter on the HTTPS
sender. On current JDK 17, enabling it breaks every outbound HTTPS connection
instead of only affecting revocation checking, because the certificate chain
is read through an accessor whose default implementation unconditionally
throws.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant