Skip to content

Disable TLS verification from SPOE#52

Merged
aiharos merged 1 commit intomasterfrom
delegate-tls
May 26, 2020
Merged

Disable TLS verification from SPOE#52
aiharos merged 1 commit intomasterfrom
delegate-tls

Conversation

@ShimmerGlass
Copy link
Copy Markdown
Collaborator

Addtionnal TLS verification done in SPOE was causing problem as the
haproxy fetch methods currently do not provide the full certificate
chain.
Since TLS verification was already enabled on haproxy side this just
removes the additional verification done in SPOE.

Fixes: #11

Copy link
Copy Markdown
Collaborator

@pierresouchay pierresouchay left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, waiting for review on HAProxy side

Addtionnal TLS verification done in SPOE was causing problem as the
haproxy fetch methods currently do not provide the full certificate
chain.
Since TLS verification was already enabled on haproxy side this just
removes the additional verification done in SPOE.

Fixes: #11
@aiharos aiharos merged commit f98576a into master May 26, 2020
@ShimmerGlass ShimmerGlass deleted the delegate-tls branch May 26, 2020 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Certificate verification doesn't support intermediate CA chains

3 participants