Do not set process.env.NODE_TLS_REJECT_UNAUTHORIZED
Doing so will affect all https requests which is dangerous. We have these options to solve this: 1. Use superagent.ca(). Appstore already provides wildcard certs for dev, staging signed with appstore_ca. But we then need to send across the appstore_ca cert across in the provision call. This is a bit of work. 2. Convert superagent into https.request calls and use the rejectUnauthorized option. 3. Simply use http. This is what is done in this commit. Fixes #488
This commit is contained in:
@@ -25,6 +25,7 @@ exports = module.exports = {
|
||||
|
||||
// these values are derived
|
||||
adminOrigin: adminOrigin,
|
||||
internalAdminOrigin: internalAdminOrigin,
|
||||
appFqdn: appFqdn,
|
||||
zoneName: zoneName,
|
||||
|
||||
@@ -163,6 +164,10 @@ function adminOrigin() {
|
||||
return 'https://' + appFqdn(constants.ADMIN_LOCATION);
|
||||
}
|
||||
|
||||
function internalAdminOrigin() {
|
||||
return 'http://127.0.0.1:' + get('port');
|
||||
}
|
||||
|
||||
function token() {
|
||||
return get('token');
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user