Skip to content

Commit

Permalink
Sync documentation of main branch
Browse files Browse the repository at this point in the history
  • Loading branch information
actions-user committed Dec 20, 2024
1 parent f987413 commit 4207727
Showing 1 changed file with 23 additions and 8 deletions.
31 changes: 23 additions & 8 deletions _versions/main/guides/rest-client.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -492,18 +492,33 @@ quarkus.rest-client.extensions-api.scope=jakarta.inject.Singleton
Setting the base URL of the client is **mandatory**, however the REST Client supports per-invocation overrides of the base URL using the `@io.quarkus.rest.client.reactive.Url` annotation.
====

=== Disabling Hostname Verification
=== Trusting all certificates and Disabling SSL hostname verification

To disable the SSL hostname verification for a specific REST client, add the following property to your configuration:
[WARNING]
====
This properties set should not be used in production.
====

You can configure TLS connection of specific REST client to trust all certificates and disable the hostname verification using tls extension.
First of all, you should configure tls configuration bucket.

To trust all certificates:
[source,properties]
----
quarkus.rest-client.extensions-api.verify-host=false
quarkus.tls.tls-disabled.trust-all=true
----

To disable SSL hostname verification:
[source,properties]
----
quarkus.tls.tls-disabled.hostname-verification-algorithm=NONE
----

Finally, lets configure our REST client with apropriate tls configuration name:
[source,properties]
----
quarkus.rest-client.extensions-api.tls-configuration-name=tls-disabled
----
[WARNING]
====
This setting should not be used in production as it will disable the SSL hostname verification.
====

=== HTTP/2 Support

Expand Down Expand Up @@ -2086,7 +2101,7 @@ and limitations:

- the default scope of the client for the new extension is `@ApplicationScoped` while the `quarkus-resteasy-client` defaults to `@Dependent`
To change this behavior, set the `quarkus.rest-client.scope` property to the fully qualified scope name.
- it is not possible to set `HostnameVerifier` or `SSLContext`
- it is not possible to set `SSLContext`
- a few things that don't make sense for a non-blocking implementations, such as setting the `ExecutorService`, don't work

== Further reading
Expand Down

0 comments on commit 4207727

Please sign in to comment.