Option to disable SSL Certificates? #304

New issue

Closed

opened 2022-12-26 09:03:51 +00:00 by gameplayer · 5 comments

gameplayer commented

2022-12-26 09:03:51 +00:00

Heyo,

Is there an option to disable SSL certificates verification (because of OpenNIC, Tor, I2P, whatever~)?

Heyo, Is there an option to disable SSL certificates verification (because of OpenNIC, Tor, I2P, whatever~)?

Johann150 commented

2022-12-26 13:03:34 +00:00

Owner

There is no such option in Foundkey and I do not intend to add one. There is a node.js environment variable but I did not test if it works for Foundkey.

NODE_TLS_REJECT_UNAUTHORIZED=value

If value equals '0', certificate validation is disabled for TLS connections. This makes TLS, and HTTPS by extension, insecure. The use of this environment variable is strongly discouraged.

There is no such option in Foundkey and I do not intend to add one. There is [a node.js environment variable](https://nodejs.org/api/cli.html#node_tls_reject_unauthorizedvalue) but I did not test if it works for Foundkey. > `NODE_TLS_REJECT_UNAUTHORIZED=value` > > If value equals `'0'`, certificate validation is disabled for TLS connections. This makes TLS, and HTTPS by extension, insecure. The use of this environment variable is strongly discouraged.

👍 1