This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 1.2.x in repository https://gitbox.apache.org/repos/asf/tomcat-native.git
The following commit(s) were added to refs/heads/1.2.x by this push: new 775330977 Better wording for BZ 67818 775330977 is described below commit 775330977ae41e2da8b7deced20656301ebcc8d8 Author: Mark Thomas <ma...@apache.org> AuthorDate: Wed Nov 1 11:41:43 2023 +0000 Better wording for BZ 67818 --- xdocs/miscellaneous/changelog.xml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/xdocs/miscellaneous/changelog.xml b/xdocs/miscellaneous/changelog.xml index cac6e1b2d..955fd881a 100644 --- a/xdocs/miscellaneous/changelog.xml +++ b/xdocs/miscellaneous/changelog.xml @@ -45,8 +45,10 @@ Remove an unreachable if condition around CRLs in sslcontext.c. (michaelo) </update> <fix> - <bug>67818</bug>: <code>SSL.setVerify()</code>/<code>SSLContext.setVerify()</code> - silently set undocumented default verify paths. (michaelo) + <bug>67818</bug>: When calling <code>SSL.setVerify()</code> or + <code>SSLContext.setVerify()</code>, the default verify paths are no + longer set. Only the explicitly configured trust store, if any, will be + used to verify client certificates. (michaelo) </fix> </changelog> </section> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org