Hi team, I want to use embedded Undertow WebServer with custom trust manager (no I don't want to use the embedded trustore support). I know I can create a new endpoint in the addBuilderCustomizers, but in this case, the application will start two port. Why private the customizeSsl method?

Comment From: wilkinsona

It looks like an oversight to me in the support for customising Undertow. Looking at the code, it's possible to customise Jetty or Tomcat's SSL configuration at this level without having multiple connectors. Unless I have missed something, that doesn't appear to be possible with Undertow.

Comment From: eppjo

I am eagerly waiting for the availability of this feature. When can it be expected?

Comment From: wilkinsona

@eppjo We don't have a firm date at the moment. As things stand, it won't be in Spring Boot 2.3 but will be considered for future 2.x releases. A pull request is a great way to being that forward and possibly get the functionality into 2.3.

Comment From: rodrigoserracoelho

Hello team, same here, we are also eagerly waiting for this feature to be available, we have a big spring boot ecosystem. Any news?

Comment From: rodrigoserracoelho

And actually the same applies for Tomcat, also not possible to configure SSLContext.

Comment From: wilkinsona

@rodrigoserracoelho No news at this time. If there was, it would appear in this issue.

And actually the same applies for Tomcat, also not possible to configure SSLContext.

You can take complete control over the SSL configuration of a Tomcat Connector using a TomatConnectorCustomizer bean. Take a look at Boot's own SslConnectorCustomizer for inspiration.

Comment From: rodrigoserracoelho

Thanks @wilkinsona for your suggestion, i will take a look.

Comment From: wilkinsona

This has been addressed in 3.1 with the introduction of support for SslBundles.