[HTTPCLIENT-1302] AllowAllHostnameVerifier should not access session

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 4.2.3
• Fix Version/s: 4.2.4
• Component/s: HttpClient (classic)
• Assignee: Unassigned
• Reporter: Philippe Mouawad
• Created: 20/Jan/13 18:40
• Updated: 20/Jan/13 20:51
• Resolved: 20/Jan/13 20:46

Description

Hello,
We are facing a bug in JMeter:

• https://issues.apache.org/bugzilla/show_bug.cgi?id=54449

Analyzing code, I noticed AllowAllHostnameVerifier ends up calling AbstractVerifier#verify(String host, SSLSocket ssl) which does more job than it should for AllowAllHostname policy