Azure Key Vault - SSLPeerUnverifiedException when running disabled acceptance tests with jdk11

[chris-j-h]

AKV tests are currently disabled for jdk11 as Tessera throws a javax.net.ssl.SSLPeerUnverifiedException: Hostname localhost not verified (no certificates) when trying to communicate with the mock AKV (WireMock) server used in the tests.

Travis's oraclejdk11 is currently jdk11.0.2. The test is reproducible locally when using jdk11.0.2. When using later versions (e.g. jdk11.0.4) the tests pass successfully.

This is a recognised issue with okhttp (used by the AKV client) and jdk11.0.2 (https://github.com/square/okhttp/issue s/4703). For further info see https://bugs.openjdk.java.net/browse/JDK-8211806 and https://bugs.openjdk.java.net/browse/JDK-8212885.

Manual testing verifies that the AKV functionality works as expected in jdk11.0.2 so this appears to be an issue only when using the mock server/self-signed certs in the acceptance tests.

Potential solutions include:

• Investigate the TLS handshake between the AKV client and WireMock server (see openjdk issues linked above)
• Wait for Travis to update to use a newer version of jdk11
• Manually install a later version of jdk11 for the AKV tests
• Try with a different mock server