L3 - Default In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
Testing Notes:
- SNI checks can be disabled in config
- SNI checks can be disabled per ENV var (CAMUNDA_OPTIMIZE_CONTAINER_ENABLE_SNI_CHECK)
- To verify, run Optimize in HTTPS and a localhost certificate, but with SNI checking enabled. This should present an SNI verification error in the browser as localhost is prohibited. cigdem.ilhan - you tested this for the Spring Boot migration already, so please reproduce those steps
Notes:
- This should be backported to maintenance/3.10
This is the controller panel for Smart Panels app
[OPT-7306] Allow disabling of SNI checks
| Status | Original: Triage [ 10612 ] | New: In Development [ 10312 ] |
| Assignee | New: Joshua Windels [ joshua.windels ] |
| Description |
Original:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*ATs:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var * ITs no longer explicitly disable SNI checks, rather they read from config |
New:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*ATs:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var * ITs no longer explicitly disable SNI checks, rather they read from config *Notes:* - This should be backported to maintenance/3.10 |
| Link | New: This issue is related to SUPPORT-18378 [ SUPPORT-18378 ] |
| Assignee | Original: Joshua Windels [ joshua.windels ] | New: Giuliano Rodrigues Lima [ giuliano.rodrigues-lima ] |
| Status | Original: In Development [ 10312 ] | New: In Review [ 10212 ] |
| Assignee | Original: Giuliano Rodrigues Lima [ giuliano.rodrigues-lima ] | New: Joshua Windels [ joshua.windels ] |
| Status | Original: In Review [ 10212 ] | New: Rework [ 11413 ] |
| Description |
Original:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*ATs:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var * ITs no longer explicitly disable SNI checks, rather they read from config *Notes:* - This should be backported to maintenance/3.10 |
New:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*Testing Notes:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var (CAMUNDA_OPTIMIZE_CONTAINER_ENABLE_SNI_CHECK) * ITs no longer explicitly disable SNI checks, rather they read from config *Notes:* - This should be backported to maintenance/3.10 |
| Description |
Original:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*Testing Notes:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var (CAMUNDA_OPTIMIZE_CONTAINER_ENABLE_SNI_CHECK) * ITs no longer explicitly disable SNI checks, rather they read from config *Notes:* - This should be backported to maintenance/3.10 |
New:
In some environments, it might be appropriate to disable SNI checks. We should allow this per configuration field
*Testing Notes:* * SNI checks can be disabled in config * SNI checks can be disabled per ENV var (CAMUNDA_OPTIMIZE_CONTAINER_ENABLE_SNI_CHECK) * To verify, run Optimize in HTTPS and a localhost certificate, but with SNI checking enabled. This should present an SNI verification error in the browser as localhost is prohibited. [~cigdem.ilhan] - you tested this for the Spring Boot migration already, so please reproduce those steps *Notes:* - This should be backported to maintenance/3.10 |
| Assignee | Original: Joshua Windels [ joshua.windels ] | New: Cigdem Ilhan [ cigdem.ilhan ] |
| Status | Original: Rework [ 11413 ] | New: Ready for Testing [ 10008 ] |