flowhub / bigiot-js

JavaScript library for interacting with the BIG IoT marketplace
3 stars 2 forks source link

Allow to disable SSL cert checking only on our requests #62

Closed jonnor closed 6 years ago

jonnor commented 6 years ago

The Java provider still uses self-signed certs. Right now we recommend disabling SSL checking globally in Node.js, which is a a very blunt hammer, breaking security on all SSL connections. Instead we should have an option to only disable it for our access requests. It looks like node-fetch allows specifying this by passing a https.Agent, https://github.com/bitinn/node-fetch/blob/master/LIMITS.md