Closed
Description
Mark Paluch opened SPR-14889 and commented
Currently, Netty4ClientHttpRequestFactory
uses SSL if either the port is 443
or not port is given and the scheme is https
. URIs having a port specified other than 443
but using https
use plain-text connections so SSL is not applied.
So https://localhost:8200
connects via plaintext but should use SSL.
Affects: 4.3.4
Issue Links:
- Netty4ClientHttpRequestFactory should configure a default SslContext [SPR-14744] #19310 Netty4ClientHttpRequestFactory should configure a default SslContext
- Netty4ClientHttpRequestFactory should use SNI for TLS connections [SPR-15101] #19668 Netty4ClientHttpRequestFactory should use SNI for TLS connections
Referenced from: pull request #1235, and commits 6261106, 5285f53