We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1f69f48 commit 39b0d14Copy full SHA for 39b0d14
src/main/java/com/microsoft/sqlserver/jdbc/IOBuffer.java
@@ -1812,7 +1812,9 @@ else if (con.getTrustManagerClass() != null) {
1812
if (logger.isLoggable(Level.FINEST))
1813
logger.finest(toString() + " Initializing SSL context");
1814
1815
- sslContext.init(km, tm, null);
+ sslContext.init(km, tm, null); // CodeQL [SM03853] Potential all-accepting TrustManager is by design
1816
+ // Permissive trust manager allows minimum encryption of credentials even when trusted certificates
1817
+ // aren't provisioned on the server.
1818
1819
// Got the SSL context. Now create an SSL socket over our own proxy socket
1820
// which we can toggle between TDS-encapsulated and raw communications.
0 commit comments