arturobernalg opened a new pull request, #916: URL: https://github.com/apache/httpcomponents-client/pull/916
Since the default verifier fallback was removed (#649), `HostnameVerificationPolicy.CLIENT` or `BOTH` with a null `HostnameVerifier` performs no hostname verification. `ConscryptClientTlsStrategy(ctx)` and the deprecated `DefaultClientTlsStrategy` constructor end up in that state. This keeps the separation between verification policy and verifier configuration: * `ConscryptClientTlsStrategy` and the deprecated `DefaultClientTlsStrategy` constructor select `BUILTIN` when no verifier is given * `AbstractClientTlsStrategy` rejects `CLIENT` / `BOTH` without a verifier Alternative to #914. Tests added. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
