Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add push_server.disable_tls_validation to Dendrite configuration #1172

Conversation

tommie
Copy link
Contributor

@tommie tommie commented Nov 28, 2021

This disables the TLS certificate check for Push gateways. Sytest uses HTTPS, but with a self-signed certificate. Synapse already has an option like this.

Dendrite-side must be committed first: matrix-org/dendrite#2061

@tommie
Copy link
Contributor Author

tommie commented Nov 28, 2021

Reviewer: @kegsay

This disables the TLS certificate check for Push gateways, similar to
the Synapse configuration.
@tommie tommie force-pushed the http_client_tls_insecure_skip_verify_for_testing branch from dea870d to 69dd8d3 Compare December 1, 2021 10:49
@tommie tommie changed the title Add http_client_tls_insecure_skip_verify_for_testing to Dendrite configuration Add push_server.disable_tls_validation to Dendrite configuration Dec 3, 2021
@tommie
Copy link
Contributor Author

tommie commented Dec 3, 2021

See matrix-org/dendrite#1842 (comment) for the commit ordering relative Dendrite.

@tommie
Copy link
Contributor Author

tommie commented Dec 10, 2021

@PiotrKozimor raised the question if this can be merged before the config option has been added to Dendrite. I've assumed that Dendrite will fail if we try, but maybe that's not the case?

@tommie
Copy link
Contributor Author

tommie commented Dec 10, 2021

... and @neilalexander just answered it's okay on the Dendrite 1842.

@tommie tommie marked this pull request as ready for review December 10, 2021 16:25
@tommie tommie requested a review from a team as a code owner December 10, 2021 16:25
@squahtx squahtx requested a review from a team December 13, 2021 10:57
@clokep clokep removed the request for review from a team December 13, 2021 16:58
@clokep
Copy link
Member

clokep commented Dec 13, 2021

I removed the review on synapse-core since I don't think it is necessary here. Please shout if you'd like us to take a look though!

@neilalexander neilalexander merged commit eb25121 into matrix-org:develop Dec 16, 2021
@tommie tommie deleted the http_client_tls_insecure_skip_verify_for_testing branch December 16, 2021 10:21
( ! defined $ENV{'POSTGRES'} || $ENV{'POSTGRES'} == '0') ?
"file:$self->{hs_dir}/mscs.db" : $db_uri,
},
mscs => ["msc2836", "msc2946", "msc2444", "msc2753"],
},

push_server => {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tommie I just realized that we already have push_server section below

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've fixed that. Good catch.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry about that. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants