envoyproxy/envoy

Support skipping certificate verification when establishing a Quic connection

Open

#17,700 建立於 2021年8月12日

在 GitHub 查看
 (11 留言) (0 反應) (0 負責人)C++ (5,373 fork)batch import
area/quichelp wanted

倉庫指標

Star
 (27,997 star)
PR 合併指標
 (平均合併 8天) (30 天內合併 378 個 PR)

描述

Envoys seems to skip certificate verifications by default as documented in the API.

However the Quic implementation of the createQuicNetworkConnection function currently doesn't take in any configuration and always uses the EnvoyQuicProofVerifier.

This prevents establishment of Quic connection in load testing applications where we might be running with test / bogus certificates. This might also be affecting other use cases, so hoping to start a discussion whether this is something we want to improve by allowing a configuration that skips the certificate verification.

貢獻者指南