HostnameVerifier = WSO2 Micro Integrator 4.xx 的 AllowAll

Question

我使用 Micro Integrator 构建了一个 API，它使用自签名证书调用内部 API 端点。我收到此错误消息

ERROR_CODE : 101500,ERROR_MESSAGE :Error in Sender,ERROR_DETAIL : javax.net.ssl.SSLException: Host name verification failed for host : app-name.namespace.svc.cluster.local\n\tat org.apache.synapse.transport.http.conn.ClientSSLSetupHandler.verify(ClientSSLSetupHandler.java:182)\n\tat org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:371)\n\tat org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:541)\n\tat org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)\n\tat org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)\n\tat org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)\n\tat org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)\n\tat org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)\n\tat org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)\n\tat org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591)\n\tat java.base/java.lang.Thread.run(Thread.java:834)\n

是否可以将 Micro Integrator 配置为允许所有主机名验证？我在 deployment.toml 上添加了这个，但仍然遇到问题。这与我在 APIM deployment.toml 中添加的用于禁用主机名验证的代码块相同。

[transport.passthru_https.sender.parameters]
HostnameVerifier = "AllowAll"

Answer 1

您可以在 MI 的 deployment.toml 中使用以下配置。

[transport.http]
sender.hostname_verifier = "AllowAll"