[HIVE-26425] Skip SSL cert verification for downloading JWKS in HS2

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-2
• Labels: pull-request-available
• Assignee: Yu-Wen Lai
• Reporter: Yu-Wen Lai
• Created: 22/Jul/22 21:44
• Updated: 16/Nov/22 13:50
• Resolved: 02/Aug/22 00:44

Description

In a dev/test/staging environment, we would probably use letsencrypt staging certificate for a token generation service. However, its certificate is not accepted by JVM by default. To ease JWT testing in those kind of environments, we can introduce a property to disable the certificate verification just for JWKS downloads.

Ref: https://letsencrypt.org/docs/staging-environment/

Issue Links

• links to: GitHub Pull Request #3473