Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • Q quickfix
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 48
    • Issues 48
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 25
    • Merge requests 25
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • quickfixgo
  • quickfix
  • Issues
  • #311
Closed
Open
Issue created Oct 12, 2017 by Administrator@rootContributor

TLSConfig is unusable for non client side verification

Created by: chackett

Hello,

I want to use QuickFixGo to connect to an acceptor via TLS but not provide socket private key file (for client to server auth).

This doesn't provide the result I would like, if a private key is not supplied the loadTLSConfig() returns a default config, with insecureSkipVerify set to true. It also doesn't set the minimum TLS version to what was specified in the config. And I also don't know why the default minimum TLS version is not the lowest version.

I am going to add a fix for this that will still build the TLS config and honour the provided config, event if client side connect is not required. With this in mind, how do you suggest I allow the user to specify that TLS is required? I propose adding TLSConnect=Y/N to the config file.

Thanks

Assignee
Assign to
Time tracking