SessionPropertiesSSLValidateCertificate Property

Indicates if the certificate validation with certificates in the truststore is enabled. Default: true

Note on certificate validation: When validating certificates, the messaging APIs for C and .NET use the following validation rules, after building the chain from the server certificate to a self-signed root certificate using certificates presented by the server and certificates in the trust store :

• Verify the root certificate is trusted.
• Verify depth of the chain is <= 3.

Java and JMS messaging APIs use the same rules as C and .NET with the following exceptions:

• Depth validation is not enforced in Java or JMS.
• When the server presents an incomplete certificate chain, Java/JMS messaging APIs only require the signer of the incomplete certificate chain to be in the trust store, where this could be insufficient for C/.NET APIs.

Therefore C and .NET messaging APIs certificate validation rules are more restrictive, hence if a certificate is accepted by C or .NET, it will definitely be accepted by Java and JMS.

Default: true

public bool SSLValidateCertificate { get; set; }