Skip to content

[EMAIL-208] Updated the default sslCheckServerIdentity value#393

Open
Nocera60 wants to merge 1 commit into
apache:masterfrom
Nocera60:master
Open

[EMAIL-208] Updated the default sslCheckServerIdentity value#393
Nocera60 wants to merge 1 commit into
apache:masterfrom
Nocera60:master

Conversation

@Nocera60

@Nocera60 Nocera60 commented Dec 10, 2025

Copy link
Copy Markdown

The default checkserveridentity value changed in Jakarta EE to true which broke support for disabling server identy checking via setSSLCheckServerIdentity(final boolean sslCheckServerIdentity).

The default `checkserveridentity` value changed in Jakarta EE to `true`
which broke support for disabling server identy checking via
`setSSLCheckServerIdentity(final boolean sslCheckServerIdentity)`.
@Nocera60 Nocera60 changed the title [EMAIL-208] Updated the default value [EMAIL-208] Updated the default sslCheckServerIdentity value Dec 10, 2025
@garydgregory

Copy link
Copy Markdown
Member

-1: This PR contains no unit tests.

@Trustinbtc999-hue

Copy link
Copy Markdown

What do I do


/**
* If set to true, check the server identity as specified by RFC 2595. These additional checks based on the content of the server's certificate are intended
* to prevent man-in-the-middle attacks. Defaults to false.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How do I fix this?

properties.setProperty(EmailConstants.MAIL_SMTP_SOCKET_FACTORY_FALLBACK, "false");
}

if ((isSSLOnConnect() || isStartTLSEnabled()) && isSSLCheckServerIdentity()) {

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's going on with this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants