apollographql / apollographql/apollo-tooling
Apollo CLI --skipSSLValidation not respected
Open
- Dominant language
- TypeScript
- Stars
- 3k
- Forks
- 460
- PR merge metrics
- No merged PRs in 30d
Description
See #1590 - Apollo CLI unable to verify the first certificate when downloading schema via HTTPS
The flag is no longer working; you have to set the environment variable `NODE_TLS_REJECT_UNAUTHORIZED ` for Node to ignore it
Contributor guide
Research direction
Start by tracing the Apollo CLI schema-download path and the handling of the --skipSSLValidation flag, then reproduce the HTTPS certificate failure described in the issue. Done means the flag is respected during schema downloads without requiring NODE_TLS_REJECT_UNAUTHORIZED.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- graphql, typescript
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100