Skip to content

Disable SSL certificate validation for testing

This task outlines the process for disabling certificate validation. Do not use these settings in a production environment.


Disabling certificate validation should only be used for testing. Using these settings in a production environment will leave users vulnerable to man in the middle attacks.

  1. Open the service configuration file application.conf in a text editor.

    Note: Use a plain text editor to avoid inserting invalid formatting or symbols into application.conf. Do not use a rich text editor such as Microsoft Word for editing configuration files.

  2. Set the value for the key ephox.http.websphere.use-ssl-config to false and to true.

    ephox {
      # ... other settings not shown
      http {
        websphere.use-ssl-config = false
        trust-all-cert = true

Parent topic:Common tasks, concepts and reference information

Related information

Tiny Editor Services configuration

List of valid application.conf settings

Sample application.conf