unistack-org/micro
4
0
Fork 3
Code Issues 18 Pull Requests 1 Actions Packages Projects Releases 263 Wiki Activity

WIP: initial mtls package #133

Merged
vtolstov merged 4 commits from mtls into v3 2022-06-27 00:22:10 +03:00
Conversation 1 Commits 4 Files Changed 3 +1 -1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 4a8f490e0c - Show all commits

2
mtls/mtls.go
View File

@ -179,7 +179,7 @@ type ServerOption func(*ServerOptions)
github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)
github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)
func NewServerConfig(src *tls.Config) *tls.Config { func NewServerConfig(src *tls.Config) *tls.Config {
dst := src.Clone() dst := src.Clone()
dst.InsecureSkipVerify = true // dst.InsecureSkipVerify = true
github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)
github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)
dst.MinVersion = tls.VersionTLS13 dst.MinVersion = tls.VersionTLS13
dst.ClientAuth = tls.VerifyClientCertIfGiven dst.ClientAuth = tls.VerifyClientCertIfGiven
return dst return dst

github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)
github-code-scanning[bot] commented 2022-06-05 06:03:30 +03:00 (Migrated from github.com)
Review
Copy Link

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.

Show more details

## Disabled TLS certificate check InsecureSkipVerify should not be used in production code. [Show more details](https://github.com/unistack-org/micro/security/code-scanning/2)