Hi Marco,
Thanks for reporting all the details back to us.
Final question to Christian ... instead of ignoring certificates altogether could you plan for a less risky option IGNORE_HOSTNAME_VERIFICATION which just ignores the verification of the host name of a certificate?
I think so. Certificates are currently ignored via a small Java function [1]. Do you have an idea how this code would need to be modified?
Cheers, Christian
[1] https://github.com/BaseXdb/basex/blob/master/basex-core/src/main/java/org/ba...