search

artemiscloud / activemq-artemis-operator

Apache License 2.0
62 stars 62 forks source link

Disabled TLS certificate check #919

Open Nanmozhi22 opened 3 months ago

Nanmozhi22 commented 3 months ago

The field InsecureSkipVerify controls whether a TLS client verifies the server's certificate chain and host name. If set to true, the client will accept any certificate and any host name in that certificate, making it susceptible to man-in-the-middle attacks.

Impact: man-in-the-middle attacks

Nanmozhi22 commented 3 months ago

I will work on this issue

Nanmozhi22 commented 3 months ago

Our Internal PR has been opened for review , the code change will updated soon

brusdev commented 3 months ago

@Nanmozhi22 thanks for sharing your progress and feel free to tag me on your internal PR I'll be happy to review it

brusdev commented 1 month ago

@Nanmozhi22 I think that @gtully is working on an alternative solution. Could you share the progress on your internal PR?