Hello jetty users, im trying to get http2-client and http2-server running
in my test environment. I've set my server to use SSL, just like i did
previously with http3-server:
SslContextFactory.Server sslContextFactory = new SslContextFactory.Server();
sslContextFactory.setKeyStorePath("/home/test/keystore3.p12");
sslContextFactory.setKeyStorePassword("passwd");
sslContextFactory.setCertAlias("jetty");

the sslcontextfactory is passed to the connector:
ServerConnector connector = new ServerConnector(server, sslContextFactory,
http2);

I can see that the server is starting and is using the right certificate.
Now, on the client side i tried to use following:
ClientConnector connector = http2Client.getClientConnector();
connector.getSslContextFactory().setValidateCerts(false);
connector.getSslContextFactory().setValidatePeerCerts(false);
CompletableFuture<Session> sessionCF =
http2Client.connect(connector.getSslContextFactory(), serverAddress,new
Session.Listener.Adapter());

Unfortunately i'm ending up with with an exception:
PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target

My self signed cert comes with self signed CA cert, i tried adding it to
/etc/ssl/certs/java/cacerts, but result is the same. openssl s_client shows
me correct certificate with cert path.

Is there a way to completely disable certificate verification for testing
purposes? it seems that both settings i tried are being ignored by
http2client

thanks in advance
_______________________________________________
jetty-users mailing list
[email protected]
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

Reply via email to