Skip to content

v1.2.0

Choose a tag to compare

View all tags
@CryptoJones CryptoJones released this 07 Oct 07:06
v1.2.0
aaac5f4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor release: per-lane TLS trust for http lanes.

Added

  • ca_bundle: PATH (#78, PR #130): an http lane can reach a self-hosted or corporate endpoint behind a private CA. The bundle replaces the system roots for that lane only, so the private CA cannot vouch for any other host. A missing or bad bundle fails the lane with an error that names the path.
  • insecure: true: turns verification off for one lane and prints a warning on every call. It cannot be a default, cannot be combined with ca_bundle, and is rejected on cli/acp lanes.
  • skill/toolpanel.py tool rounds use the same per-lane TLS settings.

Nothing changes when neither key is set. There's no longer any reason to use PYTHONHTTPSVERIFY=0, which turns verification off for every lane.

roundtable lanes edit Local --set ca_bundle=~/certs/internal-ca.pem

Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/

Assets 2
Loading