Uploaded image for project: 'Policy Framework'
  1. Policy Framework
  2. POLICY-3145

HTTPS clients should not allow self-signed certificates

    XMLWordPrintable

Details

    • Task
    • Status: Closed
    • Medium
    • Resolution: Done
    • None
    • Istanbul Release
    • None
    • None

    Description

      IndexedHttpClientFactory.addClient() sets the self-signed-cert to true if https is enabled.  It should only set it to true if the corresponding property is true.

      Attachments

        # Subject Branch Project Status CR V
        119866,2 Use self-signed-cert property for HTTP clients master policy/common Status: MERGED +2 +1

        Activity

          People

            jrh3 Jim Hahn
            jrh3 Jim Hahn
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: