Re: [basex-talk] TLS 1.2

Hi Marco, Thanks for reporting all the details back to us.

Final question to Christian ... instead of ignoring certificates altogether could you plan for a less risky option IGNORE_HOSTNAME_VERIFICATION which just ignores the verification of the host name of a certificate?

I think so. Certificates are currently ignored via a small Java function [1]. Do you have an idea how this code would need to be modified? Cheers, Christian [1] https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/ba...