Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate TOFU, add TRUST_ALL and remove E_NON_LOCAL #268

Merged
merged 7 commits into from
Nov 1, 2016

Conversation

technige
Copy link
Contributor

@technige technige commented Nov 1, 2016

  • Adds TRUST_ALL_CERTIFICATES and sets as default trust mode
  • Deprecates TRUST_ON_FIRST_USE
  • Explicitly blocks TRUST_ON_FIRST_USE in combination with bolt+routing
  • Removes ENCRYPTION_NON_LOCAL

// intentional fallthrough
// END OF DEPRECATED CASES //

case TRUST_ALL_CERTIFICATES:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shall we default to TRUST_ALL for old TRUST_SIGNED? isn't it more reasonable to fall through to TRUST_CUSTOM_CA? The log.warn at line 233 suggests it would be TRUST_CUSTOM_CA

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, you're completely right, I messed up the ordering there.

@zhenlineo
Copy link
Contributor

+1

@zhenlineo zhenlineo merged commit 82c9553 into neo4j:1.1 Nov 1, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants