Skip to content

SSL certificate verification for userinfo call to the IdP with self signed cert #145

@dfresh613

Description

@dfresh613

Hi, I have a test system I am using Vouch to perform OIDC authentication against. This system currently uses a self signed certificate. In production, it will not use self signed certificate.

Would it be beneficial to implement a flag which will allow vouch to skip verification of all certificates for self signed environments?

What is the best way to go about this? I assume we can update the httpclient with something like:

 transCfg := &http.Transport{
                 TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, 
         }
	client := &http.Client{Transport: transCfg}

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions