Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 345656 - Disambiguate SslContextFactory#validateCerts property
Summary: Disambiguate SslContextFactory#validateCerts property
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: unspecified   Edit
Hardware: PC Mac OS X - Carbon (unsup.)
: P3 normal (vote)
Target Milestone: 7.2.x   Edit
Assignee: Michael Gorovoy CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-05-12 16:08 EDT by Chad La Joie CLA
Modified: 2011-05-13 17:36 EDT (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chad La Joie CLA 2011-05-12 16:08:06 EDT 
Build Identifier: 7.3.1

In the SslContextFactory, the "validateCerts" method controls the validation of the end-entity certificate by the user of that certificate and the validation of received certificates.  If the end-entity certificate validation is not done away with (see bug #345655), this property should be split in to two different ones.  As it stands right now, as best as I can tell, it would be impossible to have a self-signed end-entity certificate and to use client-cert auth.


Reproducible: Always
Comment 1 Michael Gorovoy CLA 2011-05-13 17:36:45 EDT 
Committed r3141.