Explicitly disable hostname verification in the default JDisc SSL setup
@@ -16,7 +16,6 @@ import java.nio.file.Paths;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.cert.X509Certificate;
-import java.util.Arrays;
import java.util.List;
/**
@@ -55,6 +54,7 @@ public class DefaultSslContextFactoryProvider implements SslContextFactoryProvid
factory.setTrustStore(createTruststore(sslConfig));
}
factory.setProtocol("TLS");
+ factory.setEndpointIdentificationAlgorithm(null); // disable hostname verification of client certs
return factory;
}
