[
https://issues.apache.org/jira/browse/CAMEL-19856?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gerald Kallas updated CAMEL-19856:
----------------------------------
Description:
we had a code (XML DSL) that was already working to skip SSL hostname
validation like
{code:java}
<bean id="noopHostnameVerifier"
class="org.apache.http.conn.ssl.NoopHostnameVerifier"/>
...
<to
uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=noopHostnameVerifier'/>{code}
It's not working anymore, getting
{code:java}
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target {code}
I tried also
{code:java}
<to
uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=#noopHostnameVerifier'/>{code}
same error.
The underlying Java (within a Docker containe) is
{code:java}
openjdk version "11.0.11" 2021-04-20 OpenJDK Runtime Environment
AdoptOpenJDK-11.0.11+9 (build 11.0.11+9) OpenJDK 64-Bit Server VM
AdoptOpenJDK-11.0.11+9 (build 11.0.11+9, mixed mode){code}
was:
we had a code (XML DSL) that was already working to skip SSL hostname
validation like
{code:java}
<bean id="noopHostnameVerifier"
class="org.apache.http.conn.ssl.NoopHostnameVerifier"/>
...
<to
uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=noopHostnameVerifier'/>{code}
It's not working anymore, getting
{code:java}
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target {code}
I tried also
{code:java}
<to
uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=#noopHostnameVerifier'/>{code}
same error.
The underlying Java (within a Docker containe) is
{code:java}
openjdk version "11.0.11" 2021-04-20 OpenJDK Runtime Environment
AdoptOpenJDK-11.0.11+9 (build 11.0.11+9) OpenJDK 64-Bit Server VM
AdoptOpenJDK-11.0.11+9 (build 11.0.11+9, mixed mode){code}
> NoopHostnameVerifier seems to not working any longer
> ----------------------------------------------------
>
> Key: CAMEL-19856
> URL: https://issues.apache.org/jira/browse/CAMEL-19856
> Project: Camel
> Issue Type: Bug
> Components: camel-http4
> Affects Versions: 3.20.2
> Reporter: Gerald Kallas
> Priority: Major
>
> we had a code (XML DSL) that was already working to skip SSL hostname
> validation like
> {code:java}
> <bean id="noopHostnameVerifier"
> class="org.apache.http.conn.ssl.NoopHostnameVerifier"/>
> ...
> <to
> uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=noopHostnameVerifier'/>{code}
> It's not working anymore, getting
>
> {code:java}
> javax.net.ssl.SSLHandshakeException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target {code}
> I tried also
>
> {code:java}
> <to
> uri='https://server/api/v1/entity/integrationservice/delta?x509HostnameVerifier=#noopHostnameVerifier'/>{code}
> same error.
>
> The underlying Java (within a Docker containe) is
>
> {code:java}
> openjdk version "11.0.11" 2021-04-20 OpenJDK Runtime Environment
> AdoptOpenJDK-11.0.11+9 (build 11.0.11+9) OpenJDK 64-Bit Server VM
> AdoptOpenJDK-11.0.11+9 (build 11.0.11+9, mixed mode){code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
