Skip to content

Commit 0807038

Browse files
committed
JVMCBC-1144: Trust well-known certificate authorities unless another trust source is provided
We can now use the default trust source for non-Capella clusters. Change-Id: Ic540c873295aba9e9f9d9aeb07481ca6edb0e689 Reviewed-on: https://review.couchbase.org/c/couchbase-jvm-clients/+/181475 Reviewed-by: David Nault <[email protected]> Tested-by: Build Bot <[email protected]>
1 parent ede5f28 commit 0807038

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

core-io/src/main/java/com/couchbase/client/core/util/ConnectionStringUtil.java

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -228,15 +228,6 @@ public static void checkConnectionString(CoreEnvironment env, boolean ownsEnviro
228228
}
229229

230230
boolean capella = isCapella(connStr);
231-
if (tls && !userSpecifiedTrustSource(env.securityConfig()) && !capella) {
232-
// Default trust source only works with Capella.
233-
throw InvalidArgumentException.fromMessage(
234-
"When TLS is enabled, the cluster environment's security config must specify" +
235-
" either the Certificate Authority certificate(s) to trust," +
236-
" or the trust manager factory to use." +
237-
" (Unless connecting to cloud.couchbase.com.)"
238-
);
239-
}
240231

241232
if (capella && !tls) {
242233
// Can't connect to Capella without TLS. Until we determine

0 commit comments

Comments
 (0)