[ 
https://issues.apache.org/jira/browse/KNOX-141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13774652#comment-13774652
 ] 

Larry McCay commented on KNOX-141:
----------------------------------

I'm not sure that this is something that we can or should provide. The hostname 
verification is done by the implementation details of the client - such as JSSE 
in java. In the case of JSSE, you can turn on JSSE debug logging to capture all 
the information that you need. Perhaps, we can just document the switches for 
turning on that debug info?
                
> Diagnostic debug output when generated SSL keystore info doesn't match 
> environment
> ----------------------------------------------------------------------------------
>
>                 Key: KNOX-141
>                 URL: https://issues.apache.org/jira/browse/KNOX-141
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: Server
>    Affects Versions: 0.3.0
>            Reporter: Kevin Minder
>            Assignee: Larry McCay
>             Fix For: 0.3.0
>
>
> For easy test setup the gateway will create a self signed cert at startup.  
> In some cases the hostname used for this cert doesn't match the SSL clients 
> expectation for the host and this causes connection issues.  When this occurs 
> there needs to be very clear debug output that identifies the issue and 
> proposes a way to fix the problem.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to