From a0ea7d72222947b66546aa3f67811b9bb4627014 Mon Sep 17 00:00:00 2001 From: agunapal Date: Wed, 8 Nov 2023 01:28:43 +0000 Subject: [PATCH] Update secuirty guide with SSL --- SECURITY.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index 1f424bcfa3..f41cab868c 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -29,7 +29,13 @@ TorchServe as much as possible relies on automated tools to do security scanning 2. TorchServe executes arbitrary python code packaged in the `mar` file. Make sure that you've either audited that the code you're using is safe and/or is from a source that you trust 4. By default TorchServe allows you to register models from all URLs. Make sure to set `allowed_urls` parameter in config.properties to restrict this. You can find more details in the [configuration guide](https://github.com/pytorch/serve/blob/master/docs/configuration.md#other-properties) - `use_env_allowed_urls=true` is required in config.properties to read `allowed_urls` from environment variable +5. Enable SSL: + TorchServe supports two ways to configure SSL: + 1. Using a keystore + 2. Using private-key/certificate files + + You can find more details in the [configuration guide](https://github.com/pytorch/serve/blob/master/docs/configuration.md#enable-ssl)