SslDomain.VerifyMode

Determines the level of peer validation.

{@link #VERIFY_PEER_NAME} is used by default in {@link Mode#CLIENT client} mode if not configured otherwise, with {@link #ANONYMOUS_PEER} used for {@link Mode#SERVER server} mode if not configured otherwise.

Values

ValueMeaning
VERIFY_PEER

Requires peers provide a valid identifying certificate signed by a trusted certificate. Does not verify hostname details of the peer certificate, use {@link #VERIFY_PEER_NAME} for this instead.

VERIFY_PEER_NAME

Requires peers provide a valid identifying certificate signed by a trusted certificate, including verifying hostname details of the certificate using peer details provided when configuring TLS via {@link Transport#ssl(SslDomain, SslPeerDetails)}.

ANONYMOUS_PEER

does not require a valid certificate, and permits use of ciphers that do not provide authentication

Meta