Dhruv Patel created FLINK-32015: ----------------------------------- Summary: Flink does not fail SSL Handshake when expired cert is used Key: FLINK-32015 URL: https://issues.apache.org/jira/browse/FLINK-32015 Project: Flink Issue Type: Bug Components: Runtime / Network Reporter: Dhruv Patel
We recently observed that Flink is able to perform SSL communication without any issues even if certs in the trust store are expired As per this issue in Netty library, it says that Default TrustManagerFactory does not come with that check in place and we need to implement our own TrustManagerFactory for the desired behavior https://github.com/netty/netty/issues/8461 -- This message was sent by Atlassian Jira (v8.20.10#820010)