spring-cloud / spring-cloud/spring-cloud-openfeign

feign.httpclient.disable-ssl-validation = true doesn't disable ssl validation for HttpClient

Open
#1,196 0 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

waiting-for-triage
Dominant language
Java
Stars
1.3k
Forks
838
Avg merge
2d 11h
Merged PRs (30d)
13

Description

You can further customise http clients by setting values in the spring.cloud.openfeign.httpclient.xxx properties.

feign.httpclient.disable-ssl-validation should apply to all clients.

Interestingly, this parameter doesn't seem to apply to http2Client configuration. Or I did miss something.
Same for the default client if no client is specified.

Here the configuration:
https://github.com/spring-cloud/spring-cloud-openfeign/blob/main/spring-cloud-openfeign-core/src/main/java/org/springframework/cloud/openfeign/clientconfig/Http2ClientFeignConfiguration.java#L39-L53

https://github.com/search?q=repo%3Aspring-cloud%2Fspring-cloud-openfeign%20isDisableSslValidation&type=code

isDisableSslValidation applies to hc5 and okhttp3 but not http2Client nor default client (jdk httpClient from feign).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read Http2ClientFeignConfiguration.java at the linked lines and compare its handling with the isDisableSslValidation usages found by the linked repository search. Trace the default JDK HttpClient path as well as the http2Client configuration. Done means feign.httpclient.disable-ssl-validation is honored consistently by the affected clients.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring
Domain
api, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.