| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | test: set rejectUnauthorized in tls/https tests | Ben Noordhuis | 2012-09-15 | 1 | -5/+3 |
| | | | | | | Update the tls and https tests to explicitly set rejectUnauthorized instead of relying on the NODE_TLS_REJECT_UNAUTHORIZED environment variable getting set. | ||||
| * | tls, https: validate server certificate by default | Ben Noordhuis | 2012-09-15 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | This commit changes the default value of the rejectUnauthorized option from false to true. What that means is that tls.connect(), https.get() and https.request() will reject invalid server certificates from now on, including self-signed certificates. There is an escape hatch: if you set the NODE_TLS_REJECT_UNAUTHORIZED environment variable to the literal string "0", node.js reverts to its old behavior. Fixes #3949. | ||||
| * | test: add https + .pfx client/server test | Ben Noordhuis | 2012-05-14 | 1 | -0/+56 |
