search

oracle / ktls-utils

TLS handshake utilities for in-kernel TLS consumers
GNU General Public License v2.0
28 stars 15 forks source link

add option to skip server certificate check #54

Closed reubenhwk closed 4 months ago

reubenhwk commented 4 months ago

This is useful for debugging. I have an NFS server in which non production builds will generate an x509 on the fly and send that to the client. The client has no way to have proper truststore to verify that certificate, so the client must ignore it. To enable no certificate checking, use the following config...

[authenticate.client] no_certificate_check = 1

Testing done to verify...

oracle-contributor-agreement[bot] commented 4 months ago

Thank you for your pull request and welcome to our community! To contribute, please sign the Oracle Contributor Agreement (OCA). The following contributors of this PR have not signed the OCA:

To sign the OCA, please create an Oracle account and sign the OCA in Oracle's Contributor Agreement Application.

When signing the OCA, please provide your GitHub username. After signing the OCA and getting an OCA approval from Oracle, this PR will be automatically updated.

If you are an Oracle employee, please make sure that you are a member of the main Oracle GitHub organization, and your membership in this organization is public.

olgakorn1 commented 4 months ago

Can we have this only available under some strict usage? Like it can only work started in the foreground (with some -d flag) and it’ll only run for 10mins and then it will exit… something like that would prevent somebody from using it on a permanent basis.