envoyproxy/envoy
在 GitHub 查看Support skipping certificate verification when establishing a Quic connection
Open
#17,700 创建于 2021年8月12日
area/quichelp wanted
仓库指标
- Star
- (27,997 star)
- PR 合并指标
- (平均合并 8天) (30 天内合并 378 个 PR)
描述
Envoys seems to skip certificate verifications by default as documented in the API.
However the Quic implementation of the createQuicNetworkConnection function currently doesn't take in any configuration and always uses the EnvoyQuicProofVerifier.
This prevents establishment of Quic connection in load testing applications where we might be running with test / bogus certificates. This might also be affecting other use cases, so hoping to start a discussion whether this is something we want to improve by allowing a configuration that skips the certificate verification.