Tunnels setup allow MITM attacks because of lack of authentication

sous-chefs / stunnel

Development repository for the stunnel cookbook

https://supermarket.chef.io/cookbooks/stunnel

Apache License 2.0

14 stars 46 forks source link

Tunnels setup allow MITM attacks because of lack of authentication #45

Open majormoses opened 5 years ago

majormoses commented 5 years ago

See: https://github.com/dnsimple/chef-stunnel/blob/2aefd996299dc18e8887b4bc7c57802a3d5bbf28/templates/default/stunnel.conf.erb#L43-L55

We need to expose these options and do some additional setup; until then we should add a big fat message in the readme about this as 99% are not gonna open the template to inspect every option and notice the commented out section.

github-actions[bot] commented 3 years ago

Marking stale due to inactivity. Remove stale label or comment or this will be closed in 7 days. Alternatively drop by the #sous-chefs channel on the Chef Community Slack and we'll be happy to help! Thanks, Sous-Chefs.