[JCR-4536] spi2dav: allow disabling cert and host name checks for TLS connections

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.22, 2.20.2, 2.21.3
• Component/s: jackrabbit-spi2dav
• Assignee: Julian Reschke
• Reporter: Max Barrass
• Created: 09/Mar/20 22:54
• Updated: 03/Jul/22 18:30
• Resolved: 17/Jul/20 08:19

Description

Adding support for insecure parameter to allow access to https with invalid certs.

Enabling optional support for expired ssl certs when using https on development server with self generated certificates.

Pull request already created and ready for review https://github.com/apache/jackrabbit/pull/88

Issue Links

• blocks: JCRVLT-419 Feature/enable insecure https host
• breaks: JCR-4799 jackrabbit.client.useSystemProperties undone by SSL config: client certificates no longer work
• is blocked by: JCR-4615 jcr-server: add minimal test coverage for remoting WebDAV servlet
• is related to: JCR-4610 Tests in jackrabbit-spi2dav are not executed by default
• relates to: JCR-4574 add tests for https (with self-signed cert)
• links to: GitHub Pull Request #88
• links to: GitHub Pull Request #92