Value | Meaning |
---|---|
VERIFY_PEER | Requires peers provide a valid identifying certificate signed by a trusted certificate. Does not verify hostname details of the peer certificate, use {@link #VERIFY_PEER_NAME} for this instead. |
VERIFY_PEER_NAME | Requires peers provide a valid identifying certificate signed by a trusted certificate, including verifying hostname details of the certificate using peer details provided when configuring TLS via {@link Transport#ssl(SslDomain, SslPeerDetails)}. |
ANONYMOUS_PEER | does not require a valid certificate, and permits use of ciphers that do not provide authentication |
Determines the level of peer validation.
{@link #VERIFY_PEER_NAME} is used by default in {@link Mode#CLIENT client} mode if not configured otherwise, with {@link #ANONYMOUS_PEER} used for {@link Mode#SERVER server} mode if not configured otherwise.