search

Azure-Samples / MqttApplicationSamples

Samples implementing common PubSub patterns for Edge and Cloud Brokers
MIT License
23 stars 25 forks source link

Use IgnoreEndRevocationUnknown #71

Closed rido-min closed 10 months ago

rido-min commented 10 months ago

When validating TLS connections, we dont want to configure the Revocation as NoCheck. Instead, we could use the IgnoreEndRevocationUnknown flag.

rido-min commented 10 months ago

I've added traces in https://github.com/Azure-Samples/MqttApplicationSamples/pull/71/commits/fde28231adf2f8ba04807d67e0345997d3e47e7e

and also found that we need an additional Ignore flag:

https://github.com/Azure-Samples/MqttApplicationSamples/blob/fde28231adf2f8ba04807d67e0345997d3e47e7e/mqttclients/dotnet/MQTTnet.Client.Extensions/X509ChainValidator.cs#L35

I want to investigate more to understand those flags before merging