xanzy / chef-guard

Chef-Guard protects your Chef server from untested and uncommitted cookbooks
http://xanzy.io
Apache License 2.0
60 stars 13 forks source link

Make sure the supermarket 'sslnoverify' option is always used! #10

Closed svanharmelen closed 9 years ago

svanharmelen commented 10 years ago

Currently when downloading the tar.gz to get the source hashes, that config options is not checked and used. We need to fix that, but that will mean we need to mark the internal and external supermarket differently, so we know when to check this value (as this is only meant for private supermarkets, the public one should always have a valid SSL cert).

svanharmelen commented 9 years ago

As far as I can tell this is already fixed as the only Supermarket config that we now have, is your private Supermarket (if you have any)...