hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lee Breisacher <LBreisac...@seagullsoftware.com>
Subject RE: turn off hostname verification
Date Sun, 30 May 2010 21:46:04 GMT
Yes, I read that piece of the tutorial, but I have a bare-bones simple client:

HttpClient httpclient = new DefaultHttpClient();
HttpGet httpget = new HttpGet("https://www.xyz.com/...");
HttpResponse response = httpclient.execute(httpget);
HttpEntity entity = response.getEntity();

From the tutorial, it looks like there's no easy way to adjust hostname verification. I must
get into details of socket factories and params and sf.connectSocket() and such? It's not
obvious how all these pieces fit together.


-----Original Message-----
From: Oleg Kalnichevski [mailto:olegk@apache.org] 
Sent: Sunday, May 30, 2010 1:17 PM
To: HttpClient User Discussion
Subject: Re: turn off hostname verification

On Sat, 2010-05-29 at 12:41 +0000, Lee Breisacher wrote:
> It appears that the default hostname verification in 4.1 is BROWSER_COMPATIBLE, whereas
the default in 3.x was ALLOW_ALL. Is that correct?

This is correct.

> What is the easiest way for a simple 4.1 client to turn off hostname verification?

You should configure the SSLSocketFactory with


Hope this helps


To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org

View raw message