Axis2-C
  1. Axis2-C
  2. AXIS2C-698

ssl transport does not verify the server certificate

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: Current (Nightly)
    • Fix Version/s: 1.1.0
    • Component/s: core/transport
    • Labels:
      None

      Description

      The ssl transport sender does not check if whether the server certificate is trusted valid. Hence, it allows connections with any server, even when the CA certificates provided can't be used to create a valid certificate chain.

        Activity

          People

          • Assignee:
            Dumindu Pallewela
            Reporter:
            Dumindu Pallewela
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development