With 7.0.1 release - Basic connection does not work on untrusted z/OSMF server.

[frankgiordano]

The Root Cause & What Changed
In previous versions (e.g. 7.0.0), Basic authentication unconditionally hardcoded Unirest.config().verifySsl(false) globally for all requests. This introduced security risks (ignoring certificates in production) and concurrency bugs in multithreaded apps.

When Unirest was refactored to use isolated per-connection instances (UnirestInstance), setupSsl(...) was accidentally configured to run only for AuthType.SSL.

As a result, when using AuthType.BASIC:

Setting -Dzowe.sdk.allow.insecure.connection=true or -Dzowe.sdk.truststore.path was ignored.
Java defaulted to standard JVM cacerts validation.
Connections to self-signed or internal CA mainframe servers failed with: javax.net.ssl.SSLHandshakeException: PKIX path building failed.

The Code Fix Applied
ZosmfRequest.java was updated so setupSsl(...) is called for all authentication types (BASIC, TOKEN, and SSL).

PR introduces supports for all three SSL modes for Basic/Token connections:

• Insecure Mode (zowe.sdk.allow.insecure.connection=true): Bypasses server TLS/hostname checks (acts like curl -k).
• Custom TrustStore (zowe.sdk.truststore.path): Validates server against a specific .p12 / .jks file containing internal CA certs.
• Standard Mode (Default): Validates server against trusted CAs.