Issue with upgrading to 2.3.6

[Chad La Joie]

Right, from a Shib standpoint our official response is "fix your broken
infrastructure".

That said, there is a way to revert back to the old behavior and I've
asked Daniel to go ahead and document it on the vtldap site as it's
something you configure with that library.  But honestly if you're going
to disable hostname verification then just stop using SSL/TLS because
without this check you're only pretending that your connection is secure.


On 2/29/12 10:25 AM, Halm Reusser wrote:
> But people with issues have now the choice between stick on 2.3.5 or buy
> a new cert - assumed they do not like to implement a custom
> HostnameVerifier, right?