better handling of ssl communication with SAST APIs endpoints

cxpsemea / cxsast_consolidated_report

[UNMAINTAINED] An utility to generate consolidated reports for checkmarx projects.

MIT License

0 stars 2 forks source link

better handling of ssl communication with SAST APIs endpoints #4

Open marcgp opened 4 years ago

marcgp commented 4 years ago

current implementation may suffer while connecting with SAST instances configured with self-signed certificates. in order to be prepared for this application should be able to:

allow end user to configure proper client certificates
allow end user to configure proper CA
allow end user to disable strick ssl checks (if required)

miguelfreitas93 commented 4 years ago

Hi,

Just to add more info here, I got this when trying to connect to HTTPS Checkmarx Server with a self-signed certificate:

cxsast_consolidated_report_v1.3.1_win_x64.exe --projectPattern "test" --emailSubject "Email Subject" --appName "Test" --recievers "test@checkmarx.com" [2020-01-24T21:49:29.834] [INFO] [cx reports generator] - main : fetching scans data ... [2020-01-24T21:49:29.874] [FATAL] [cx reports generator] - error handler : unable to verify the first certificate