Merged

Revert "SECURITY.md: add instruction for disabling Conscrypt's defaul… #7428

Changes from all commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Failed to load files.
Original file line numberDiff line numberDiff line change
Expand Up@@ -232,14 +232,9 @@ import java.security.Security;
...

// Somewhere in main()
Security.insertProviderAt(
Conscrypt.newProviderBuilder().provideTrustManager(false).build(), 1);
Security.insertProviderAt(Conscrypt.newProvider(), 1);
```

Note: according to [Conscrypt Implementation Notes](https://.com/google/conscrypt/blob/2.4.0/IMPLEMENTATION_NOTES.md#hostname-verification),
its default `HostnameVerifier` on OpenJDK always fails. This can be worked
around by disabling its default `TrustManager` implementation as shown above.

### TLS with Jetty ALPN

**Please do not use Jetty ALPN**
Expand Down