zlux icon indicating copy to clipboard operation
zlux copied to clipboard

App-server (and zss?) don't support certificate mode "non-strict"

Open 1000TurquoisePogs opened this issue 3 years ago • 0 comments

app-server uses nodejs verification of certificates which has two modes: total verification or no verification zowe has a mode that's in the middle, where it verifies everything except the hostname match, called 'non-strict' mode. Node doesnt seem to be able to do that but does have events that can be handled with custom code, so within https://nodejs.org/api/tls.html it could be possible to have this partial-verification. It would put the burden of verification on us though, versus just letting nodejs handle it.

1000TurquoisePogs avatar Jul 28 '22 15:07 1000TurquoisePogs