7472-Hostname verification-1

7472-Hostname verification-1 #7472
OpenLiberty · Aug 23, 2024 · 89c5227 · 89c5227
1 parent 112f0da
commit 89c5227
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/modules/reference/pages/feature/transportSecurity/examples.adoc b/modules/reference/pages/feature/transportSecurity/examples.adoc
@@ -7,7 +7,7 @@
 - <<#configure-specific, Configure specific TLS protocols>>
 - <<#outbound, Configure outbound TLS>>
 - <<#certs, Provide certificates from an environment variable or a file>>
-
+- <<#hostverify, Hostname verification>>
 
 [#config]
 === Configure transport layer security (TLS)
@@ -168,3 +168,14 @@ cert_defaultKeyStore="-----BEGIN CERTIFICATE-----
 ....
 -----END CERTIFICATE-----"
 ----
+
+[#hostverify]
+=== Hostname verification
+
+Open Liberty performs hostname verification on SSL certificates. If you want to disable the hostname verification functionality, the `verifyHostname` attribute within the `ssl` tag must be initialized to `false`.
+
+[source,xml]
+----
+<ssl id="defaultSSLConfig"   keyStoreRef="defaultKeyStore"   trustStoreRef="defaultTrustStore"  verifyHostname=“true”/>
+----
+