lukechilds/node - node - Gitea: Git with a cup of tea

8912 Commits

131 Branches

446 Tags

325 MiB

Tree: 1524d48333

Commit Graph

Author	SHA1	Message	Date
isaacs	19ecc3a4a6	test updates for streams2	12 years ago
Ben Noordhuis	35607f3a2d	tls, https: validate server certificate by default This commit changes the default value of the rejectUnauthorized option from false to true. What that means is that tls.connect(), https.get() and https.request() will reject invalid server certificates from now on, including self-signed certificates. There is an escape hatch: if you set the NODE_TLS_REJECT_UNAUTHORIZED environment variable to the literal string "0", node.js reverts to its old behavior. Fixes #3949.	13 years ago
isaacs	b0c0111b04	https: Use host header as effective servername	13 years ago

Author

SHA1

Message

Date

isaacs

19ecc3a4a6

test updates for streams2

12 years ago

Ben Noordhuis

35607f3a2d

tls, https: validate server certificate by default

This commit changes the default value of the rejectUnauthorized option from
false to true.

What that means is that tls.connect(), https.get() and https.request() will
reject invalid server certificates from now on, including self-signed
certificates.

There is an escape hatch: if you set the NODE_TLS_REJECT_UNAUTHORIZED
environment variable to the literal string "0", node.js reverts to its
old behavior.

Fixes #3949.

13 years ago

isaacs

b0c0111b04

https: Use host header as effective servername

13 years ago

3 Commits (1524d483336e1fba1c62693f65e79c2f251cd36a)