Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The HTTP option Reject Unauthorized is always set to "true" #20

Open
selcuksert opened this issue Mar 14, 2018 · 0 comments
Open

The HTTP option Reject Unauthorized is always set to "true" #20

selcuksert opened this issue Mar 14, 2018 · 0 comments

Comments

@selcuksert
Copy link

selcuksert commented Mar 14, 2018

The HTTP option Reject Unauthorized is always set to true regardless of values set for options strictSSL and rejectUnauthorized due to following code snippet:
this.rejectUnauthorized = options.strictSSL || options.rejectUnauthorized || true;

This turns out to be a problem for npm Enterprise (npm/policy-follower) that depends on changes-stream package when using an SSL interceptor even Reject Unauthorized option for npm Enterprise is set to false:
changes-stream error: self signed certificate in certificate chain

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant