envoyproxy/envoy

Support skipping certificate verification when establishing a Quic connection

Open

#17,700 创建于 2021年8月12日

在 GitHub 查看
 (11 评论) (0 反应) (0 负责人)C++ (5,373 fork)batch import
area/quichelp wanted

仓库指标

Star
 (27,997 star)
PR 合并指标
 (平均合并 8天) (30 天内合并 378 个 PR)

描述

Envoys seems to skip certificate verifications by default as documented in the API.

However the Quic implementation of the createQuicNetworkConnection function currently doesn't take in any configuration and always uses the EnvoyQuicProofVerifier.

This prevents establishment of Quic connection in load testing applications where we might be running with test / bogus certificates. This might also be affecting other use cases, so hoping to start a discussion whether this is something we want to improve by allowing a configuration that skips the certificate verification.

贡献者指南