Log In
Register
Forum
Topic RSS
12:46, EEST
March 16, 2017
Offline
Hi,
just a short question.
If I do not set a certificate validator like ‘client.setCertificateValidator(validator);’ is it then basically the same as accepting all server certificates?
Without setting a certificate validator I can still connect to all test servers I’ve installed – so I assume using no certificate listenener is more or less the same than just returning always ValidationResult.AcceptPermanently in the onValidate() method ?
Thank you!
13:58, EEST
November 28, 2018
Offline
Hi,
thanks for your questions. When you don’t set any Certificate Validator, all certificates are indeed accepted directly without checking or storing them anywhere.
Java SDK includes a DefaultCertificateValidator that you can use for default Certificate Validation. It includes another concept, a DefaultCertificateValidatorListener interface, where you can implement what to do with Certificate Validation results. See sample class MyCertificateValidationListener for an example. If you don’t set any DefaultCertificateValidatorListener, the Certificate will be judged by the Certificate Checks that it has passed or failed, resulting in rejecting or permanently accepting the Certificate.
1 Guest(s)
