apple / pkl

A configuration as code language with rich validation and tooling.
https://pkl-lang.org
Apache License 2.0
9.84k stars 259 forks source link

Do not enable TLS certificate revocation checks by default #553

Closed bioball closed 4 days ago

bioball commented 6 days ago

This addresses an issue where network requests may fail if cert revocation checks error, which may occur due to availability issues, or due to lack of internet access.

This changes the HTTP client to not check revocation on TLS certificates by default. Users of the Java client can enable this by setting Java property com.sun.net.ssl.checkRevocation to true.

Users of the native executables will not perform revocation checks.