[HTTPCLIENT-1698] Hostname verification fails when using URL with literal IPv6 address

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 4.4.1
• Fix Version/s: 5.0 Alpha1
• Component/s: HttpClient (classic)
• Assignee: Unassigned
• Reporter: Jens Borgland
• Created: 17/Nov/15 15:58
• Updated: 03/May/21 16:30
• Resolved: 28/Nov/15 13:26

Description

Repro steps:

1. Set up an HTTPS server with proper certificates (with the IPv6 address as a subject alternative name)
2. Set up HttpClient with the DefaultHostnameVerifier
3. Try to contact the server using the IPv6 address (in square brackets in accordance with RFC 2732) in the URL, something like: https://[2001:db8::2:1]:443/example

Result:
An SSLPeerUnverifiedException (note the square brackets):

 
Host name '[2001:db8::2:1]' does not match the certificate subject provided by the peer <redacted>

Expected:
The hostname verification to work (org.apache.http.conn.ssl.SSLConnectionSocketFactory should feed just the IP address, without square brackets, to the HostnameVerifier).