Skip to content

Update withTrustStrategy javadoc #927

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 15, 2021
Merged

Update withTrustStrategy javadoc #927

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions driver/src/main/java/org/neo4j/driver/Config.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -465,15 +465,15 @@ public ConfigBuilder withoutEncryption()
}

/**
* Specify how to determine the authenticity of an encryption certificate provided by the Neo4j instance we are connecting to.
* This defaults to {@link TrustStrategy#trustSystemCertificates()}.
* See {@link TrustStrategy#trustCustomCertificateSignedBy(File)} for using certificate signatures instead to verify
* trust.
* Specify how to determine the authenticity of an encryption certificate provided by the Neo4j instance we are connecting to. This defaults to {@link
* TrustStrategy#trustSystemCertificates()}. See {@link TrustStrategy#trustCustomCertificateSignedBy(File)} for using certificate signatures instead to
* verify trust.
* <p>
* This is an important setting to understand, because unless we know that the remote server we have an encrypted connection to
* is really Neo4j, there is no point to encrypt at all, since anyone could pretend to be the remote Neo4j instance.
* This is an important setting to understand, because unless we know that the remote server we have an encrypted connection to is really Neo4j, there
* is no point to encrypt at all, since anyone could pretend to be the remote Neo4j instance.
* <p>
* For this reason, there is no option to disable trust verification, if you find this cumbersome you should disable encryption using
* For this reason, there is no option to disable trust verification. However, it is possible to turn off encryption using the {@link
* ConfigBuilder#withoutEncryption()} option.
*
* @param trustStrategy TLS authentication strategy
* @return this builder
Expand Down