fail2ban install: remove -k (--insecure) from curl options#4080
Merged
georglauterbach merged 3 commits intodocker-mailserver:masterfrom Jun 19, 2024
Merged
fail2ban install: remove -k (--insecure) from curl options#4080georglauterbach merged 3 commits intodocker-mailserver:masterfrom
georglauterbach merged 3 commits intodocker-mailserver:masterfrom
Conversation
-k, --insecure
(TLS SFTP SCP) By default, every secure connection curl makes is
verified to be secure before the transfer takes place. This op‐
tion makes curl skip the verification step and proceed without
checking.
When this option is not used for protocols using TLS, curl veri‐
fies the server's TLS certificate before it continues: that the
certificate contains the right name which matches the host name
used in the URL and that the certificate has been signed by a CA
certificate present in the cert store. See this online resource
for further details:
https://curl.se/docs/sslcerts.html
For SFTP and SCP, this option makes curl skip the known_hosts
verification. known_hosts is a file normally stored in the
user's home directory in the ".ssh" subdirectory, which contains
host names and their public keys.
WARNING: using this option makes the transfer insecure.
When curl uses secure protocols it trusts responses and allows
for example HSTS and Alt-Svc information to be stored and used
subsequently. Using -k, --insecure can make curl trust and use
such information from malicious servers.
Providing -k, --insecure multiple times has no extra effect.
Disable it again with --no-insecure.
Example:
curl --insecure https://example.com
See also --proxy-insecure, --cacert and --capath.
polarathene
previously approved these changes
Jun 19, 2024
georglauterbach
approved these changes
Jun 19, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Reverts #1971
Type of change
Checklist
docs/)CHANGELOG.md