Add an api to disable hostname verification in certificate authentication

[wxkly8888]

I am using secure websocket in Flutter connect to server, my server side is using self-signed certificate. in flutter clent, I store the trusted CA.pem in local assets. and load it to verify server certificate. my code is like this:

void main() async {
  ByteData data = await rootBundle.load('assets/data/ca-cert.pem');
  runApp( child: const App());
}
class MyHttpOverrides extends HttpOverrides {
  final ByteData data;

  MyHttpOverrides({required this.data});

  @override
  HttpClient createHttpClient(SecurityContext? context) {
    final SecurityContext clientContext = SecurityContext()..
    setTrustedCertificatesBytes(data.buffer.asUint8List())
    Log().i("cert.pre=" + data.buffer.asUint8List().toString());
    return super.createHttpClient(clientContext);
  
  }
}

But I keep getting this error:

WebSocketChannelException: HandshakeException: Handshake error in client (OS Error: 
CERTIFICATE_VERIFY_FAILED: Hostname mismatch(handshake.cc:359))

it is possible to disable hostname verification before handshake?
in Python, we can use ssl_context.check_hostname = False,
in android we can use

public boolean verify(String hostname, SSLSession session) {     return true;    }

our server is within the local LAN, the IP address is using DHCP just like 192.168.1. 11, etc. so the server address is dynamic. I just don't want to verify the hostname.

[natebosch]

I think you can use the badCertificateCallback to handle this.

https://api.dart.dev/stable/2.17.1/dart-io/HttpClient/badCertificateCallback.html

[wxkly8888]

@natebosch yes I can handler hostname verification in badCertificateCallback, but all the wrong certificates will go into this method. it makes setTrustedCertificatesBytes(data.buffer.asUint8List()) useless. thinking about that a wrong certificate that is not trusted by the certificate chain and also with hosname mismatch in my case. how can I distinguish the trusted certificate from the untrusted certificate with both have hosname mismatch?