envoyproxy/envoy
在 GitHub 查看Support skipping certificate verification when establishing a Quic connection
Open
#17,700 建立於 2021年8月12日
area/quichelp wanted
倉庫指標
- Star
- (27,997 star)
- PR 合併指標
- (平均合併 8天) (30 天內合併 378 個 PR)
描述
Envoys seems to skip certificate verifications by default as documented in the API.
However the Quic implementation of the createQuicNetworkConnection function currently doesn't take in any configuration and always uses the EnvoyQuicProofVerifier.
This prevents establishment of Quic connection in load testing applications where we might be running with test / bogus certificates. This might also be affecting other use cases, so hoping to start a discussion whether this is something we want to improve by allowing a configuration that skips the certificate verification.