apache / apache/couchdb

Enable replicator cert verification by default

Open
#5,638 0 comments 0 reactions 1 assignee Claimed by @nickva View on GitHub
Dominant language
Erlang
Stars
7k
Forks
1.1k
Avg merge
1d 16h
Merged PRs (30d)
9

Description

Since OTP 25+ there is an OS independent way to load certificates [cacerts_get/0](https://www.erlang.org/doc/apps/public_key/public_key.html#cacerts_get/0) it probably makes sense to default to set `verify_ssl_certificates = true` and load all the os provided certificates

The config toggle could still be there for users to revert to the previous behavior

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.