Insecure SSL configuration in AbstractHttpSenderModule

[EdMcBane]

I've noticed that the SSL configuration in AbstractHttpSenderModule is insecure, in that it does not verify certificates or hostames (using DoNothingTrustManager and HostnameVerifierAlwaysTrue).
Moreover, there seem to be no obvious way to override these when used from AS2ClientBuilder / AS2Client, since AS2Client.sendSynchronous() does instantiate an insecure AS2SenderModule directly, without any factory or configuration point.
Is this by design? Would you accept a pull request that made the AS2SenderModule configurable?

Cheers

[phax]

Thanks for pointing this out.
Any PR is welcome :)

[phax]

Thanks for PR #21

[phax]

The commit adds 2 additional protected methods that allows you to customize SSLContext and HostnameVerifier. Does that make adaptation more simple?

[EdMcBane]

Indeed. Thanks.

[phax]

You want a 2.2.8 release

[phax]

Release 2.2.8 is out