Project

General

Profile

Actions

User story #9624

closed

Add an option to check server certificate when sending inventory

Added by Alexis Mousset over 7 years ago. Updated over 4 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
System techniques
Target version:
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Fix check:
Regression:

Description

Currently all HTTPS communication between node and server use something like curl -k and never check the certificates. That means we do not know if we are sending the inventory to the right server.

As a first step, we could add an option to remove that -k option, and require the certificate to be checked by curl, which would be a big improvement for users that gave their CA (or use a known CA).


Related issues 1 (0 open1 closed)

Is duplicate of Rudder - Architecture #15513: Make certificate verification in HTTP calls configurableReleasedNicolas CHARLESActions
Actions #1

Updated by Janos Mattyasovszky over 7 years ago

+1

Actions #2

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.1.0~beta1 to 4.1.0~beta2
Actions #3

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.1.0~beta2 to 4.1.0~beta3
Actions #4

Updated by Vincent MEMBRÉ about 7 years ago

  • Target version changed from 4.1.0~beta3 to 4.1.0~rc1
Actions #5

Updated by François ARMAND about 7 years ago

  • Target version changed from 4.1.0~rc1 to 4.2.0~beta1
Actions #6

Updated by Alexis Mousset almost 7 years ago

  • Target version changed from 4.2.0~beta1 to 4.2.0~beta2
Actions #7

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.0~beta2 to 4.2.0~beta3
Actions #8

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.0~beta3 to 4.2.0~rc1
Actions #9

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.0~rc1 to 4.2.0~rc2
Actions #10

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.0~rc2 to 4.2.0
Actions #11

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.0 to 4.2.1
Actions #12

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.1 to 4.2.2
Actions #13

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.2 to 4.2.3
Actions #14

Updated by Vincent MEMBRÉ over 6 years ago

  • Target version changed from 4.2.3 to 4.2.4
Actions #15

Updated by Benoît PECCATTE about 6 years ago

  • Target version changed from 4.2.4 to Ideas (not version specific)
Actions #16

Updated by Alexis Mousset over 5 years ago

  • Target version changed from Ideas (not version specific) to 6.0.0~beta1
Actions #17

Updated by Alexis Mousset over 4 years ago

  • Is duplicate of Architecture #15513: Make certificate verification in HTTP calls configurable added
Actions #18

Updated by Alexis Mousset over 4 years ago

  • Status changed from New to Rejected
Actions

Also available in: Atom PDF