Skip to content

Verify TLS handshake signatures with --insecure - #944

Merged
ryanfowler merged 1 commit into
mainfrom
fix/insecure-certificate-verify-signatures
Aug 7, 2026
Merged

Verify TLS handshake signatures with --insecure#944
ryanfowler merged 1 commit into
mainfrom
fix/insecure-certificate-verify-signatures

Conversation

@ryanfowler

Copy link
Copy Markdown
Owner

Summary

  • share one insecure rustls server verifier across transport and TLS inspection
  • keep certificate validation permissive while validating TLS 1.2 and TLS 1.3 CertificateVerify signatures with provider algorithms
  • test self-signed acceptance and invalid handshake signature rejection in transport and inspection

Checks

  • cargo fmt --check
  • cargo clippy --locked --all-targets --all-features -- -D warnings
  • cargo test --locked --all-features --lib --bins
  • cargo test --locked --all-features --test cli --test formatting --test grpc --test har --test http --test install --test network --test terminal --test update --test websocket -- --test-threads=2

@ryanfowler
ryanfowler enabled auto-merge August 7, 2026 13:48
@ryanfowler
ryanfowler merged commit 6e90787 into main Aug 7, 2026
4 checks passed
@ryanfowler
ryanfowler deleted the fix/insecure-certificate-verify-signatures branch August 7, 2026 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant