Actions
Bug #35359
closedMake the Http Proxy store a CA certifcate
Difficulty:
Triaged:
Yes
Bugzilla link:
Description
When talking over an https proxy, 2 certificates have to be addressed
- CA Cert of the Proxy
- CA Cert of the destination URL (assuming its https).
Currently to HTTP Proxies require both these certificates to be in systems default trust store to connect to EC2/Other compute providers.
A better approach would be to store the CA Cert of the https proxy in the database instead of the trust store. When talking to EC2 we can narrow down the certificates in the chain to the one from proxy + certificates in the system trust store.
Actions