3 ms·
There are workarounds for that, by specifying a custom key store file and overriding the socket factory to force it to load your keys. Unfortunately, most exam
by jeroenhd 1y ago
There are workarounds for that, by specifying a custom key store file and overriding the socket factory to force it to load your keys.
Unfortunately, most example code for SSL socket factories just disable TLS validation entirely. So yes, your custom CA now works reliably, but unfortunately so do self-signed certificates if you're not careful.
Luckily, modern Java doesn't need keystores anymore. Unfortunately, half the world seems stuck on Java 8.
- pixl97 1y ago>most example code for SSL socket factories just disable TLS validation entirely. I see this happen in large enterprise far more often than it should, like the kind of business where disabling SSL is a baaaad idea for the kind of attacks they're apt to get.