Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No hostname check ssl opt #4628

Merged
merged 4 commits into from
Sep 20, 2023
Merged

Conversation

bazsi
Copy link
Collaborator

@bazsi bazsi commented Sep 7, 2023

This is a somewhat modified version of #4613

@CedricArickx I changed your PR but I didn't want to overwrite it, please review the changes I have made and let me know if you agree. I opened a new PR instead of overwriting yours.

@CedricArickx
Copy link
Contributor

Looks good to me!

@bazsi
Copy link
Collaborator Author

bazsi commented Sep 12, 2023

Thanks for the review @CedricArickx we will need a news entry and then it is ready for merge.

@MrAnno MrAnno self-requested a review September 19, 2023 09:03
@MrAnno MrAnno added this to the syslog-ng 4.4 milestone Sep 19, 2023
…ignalData

Signed-off-by: Balazs Scheidler <balazs.scheidler@axoflow.com>
Signed-off-by: Balazs Scheidler <balazs.scheidler@axoflow.com>
Error message:
"Certificate subject does not match configured hostname;"

In some cases you want to verify the ssl certificate authenticity
but don't care about a mismatched hostname. For example when using
self-signed certificates that don't contain a hostname at all.
Currently there is no way to do this except for simply not verifying
the certificate at all.

This option disables the ssl certificate hostname check,
but still does all other verification steps.

Signed-off-by: Cedric Arickx <cedric.arickx@gmail.com>
Signed-off-by: Balazs Scheidler <balazs.scheidler@axoflow.com>
Signed-off-by: Balazs Scheidler <balazs.scheidler@axoflow.com>
@bazsi
Copy link
Collaborator Author

bazsi commented Sep 20, 2023

rebased and added news file. I opened this PR but this can be approved as the code was initially written by @CedricArickx

@alltilla or @MrAnno please help by approving it (if everything remains green) Thanks.

@bazsi bazsi merged commit 737ed29 into syslog-ng:master Sep 20, 2023
18 checks passed
fekete-robert pushed a commit to axoflow/axosyslog-core-docs that referenced this pull request Sep 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants