fix: jans-linux-setup vulnerability

JanssenProject · Sep 16, 2022 · f626ea2 · f626ea2
1 parent b257c13
commit f626ea2
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/jans-linux-setup/jans_setup/setup_app/utils/properties_utils.py b/jans-linux-setup/jans_setup/setup_app/utils/properties_utils.py
@@ -437,11 +437,16 @@ def check_remote_ldap(self, ldap_host, ldap_binddn, ldap_password):
     def check_oxd_server(self, oxd_url, error_out=True, log_error=True):
 
         oxd_url = os.path.join(oxd_url, 'health-check')
+
+        ctx = ssl.create_default_context()
+        ctx.check_hostname = True
+        ctx.verify_mode = ssl.CERT_NONE
+
         try:
             result = urllib.request.urlopen(
                         oxd_url,
-                        timeout = 2,
-                        context=ssl._create_unverified_context()
+                        timeout=2,
+                        context=ctx
                     )
             if result.code == 200:
                 oxd_status = json.loads(result.read().decode())