Dhruv Patel created FLINK-32015:
-----------------------------------

             Summary: Flink does not fail SSL Handshake when expired cert is 
used
                 Key: FLINK-32015
                 URL: https://issues.apache.org/jira/browse/FLINK-32015
             Project: Flink
          Issue Type: Bug
          Components: Runtime / Network
            Reporter: Dhruv Patel


We recently observed that Flink is able to perform SSL communication without 
any issues even if certs in the trust store are expired

As per this issue in Netty library, it says that Default TrustManagerFactory 
does not come with that check in place and we need to implement our own 
TrustManagerFactory for the desired behavior
https://github.com/netty/netty/issues/8461



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to