Skip to content

Upgrade of Apache httpClient for SSL certificate verification and Corresponding change in ApacheHttpClientExecutor #1070

@kushalagrawal

Description

@kushalagrawal

Hi,

We are using openstack4j-3.0.4. We were facing several issues with it because our OpenStack environment is ipv6 +https. Below are the issue while using os4j:

  1. Caused by: javax.net.ssl.SSLException: Certificate for <[2001:470:68e0:1151::100]> doesn't match any of the subject alternative names: [2001:470:68e0:1151::100, instack.localdomain, vip.localdomain]
    at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:177)
    at org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(BrowserCompatHostnameVerifier.java:62)

  2. while using resteasy-connecter We were not able to use withHostnameVerifier or withSSLVerificationDisabled because these config are getting neglected while HttpClient is getting created in ApacheHttpClientExecutor

It is required to upgrade Apache httpclient version to 4.5.3 to avoid SSLCertificate issue in IPv6. We have already changed the code accordingly to solve these 2 issues.

With your permission we would like to contribute the code so that other people can also make use of it without redundent effort.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions