agollo icon indicating copy to clipboard operation
agollo copied to clipboard

apollo客户端连接服务端时未做服务端证书校验,存在服务端仿冒的风险

Open zhongxp1219 opened this issue 2 years ago • 3 comments

请简单描述bug的场景 apollo客户端连接服务端时未做服务端证书校验,存在服务端仿冒的风险,看如下代码: image

如何重现 必现

期望 期望客户端具备服务端证书校验的能力,并能够控制是否开启校验

截图 image

zhongxp1219 avatar Jun 07 '22 12:06 zhongxp1219

I'm curious about what the actual scenario would be...

nobodyiam avatar Jun 08 '22 01:06 nobodyiam

请简单描述bug的场景 apollo客户端连接服务端时未做服务端证书校验,存在服务端仿冒的风险,看如下代码: image

如何重现 必现

期望 期望客户端具备服务端证书校验的能力,并能够控制是否开启校验

截图 image

你好,我想了解下是实际的什么使用场景导致这个问题?还是只是看到代码,觉得有这个问题?

zouyx avatar Jun 20 '22 01:06 zouyx

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Aug 31 '22 00:08 stale[bot]