hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel <southwest1...@gmail.com>
Subject DefaultHostnameVerifier for private domains
Date Mon, 20 Jan 2020 11:49:15 GMT
Hi folks 👋

I believe the recent change to
https://github.com/apache/httpcomponents-client/pull/198 broke validation
for private domains.
The domain type is now forced to ICANN. In my scenario this causes a valid
cert check for foo.bar to fail because bar is not part of the
PublicSuffixMatcher rules forcing the getDomainRoot to return a null object
and thus failing validation in the matchDomainRoot method.

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message