[AXIS2C-698] ssl transport does not verify the server certificate

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Component/s: core/transport
• Assignee: Pallewela Perera
• Reporter: Pallewela Perera
• Created: 19/Sep/07 18:28
• Updated: 07/Apr/20 17:47
• Resolved: 25/Oct/07 22:20

Description

The ssl transport sender does not check if whether the server certificate is trusted valid. Hence, it allows connections with any server, even when the CA certificates provided can't be used to create a valid certificate chain.