DependencyTrack / DependencyTrack/dependency-track

SSL Verification For Integrations Toogle

Open
#1,136 5 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

Hello! I tried to integration DT with Defect Dojo, but I ran into the problem that my certificate wasn't trusted. I could add it to the cacerts, but DT is deployed in k8s and it looks difficult.

I found a similar issue with the Fortify SSC: https://github.com/DependencyTrack/dependency-track/issues/589

What do you think about the optional disabling of certificate verification, for example, for Unirest the simple way is: `Unirest.config().VerifySsl(false);`

### Proposed Behavior:

`alpine.integrations.ssl.verify` option

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.