[ 
https://issues.apache.org/jira/browse/AXIS2C-1541?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13006996#comment-13006996
 ] 

Halewijn Geerts commented on AXIS2C-1541:
-----------------------------------------

It is possible to make a https connection without authentication. This is not 
secure, but it is possible. Allowing this is only a small change to the axis2/c 
code. Removing the check to see if CA certificate is present, and only verify 
certificates if CA certificate is present.



> do not require that CA certificate is present for https
> -------------------------------------------------------
>
>                 Key: AXIS2C-1541
>                 URL: https://issues.apache.org/jira/browse/AXIS2C-1541
>             Project: Axis2-C
>          Issue Type: Improvement
>          Components: core/transport
>    Affects Versions: 1.6.0
>            Reporter: Halewijn Geerts
>            Assignee: Dumindu Pallewela
>
> axis2_ssl_utils_initialize_ctx returns NULL if no CA certificate is set, but 
> a CA certificate is not required for making a https connection.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to