infrawatch / sg-core / 31108176330

47%

push

github

Enable TLS certificate verification for Elasticsearch client (#179)

Instead of silently disabling TLS verification when tlsServerName is
not provided, always verify server certificates. An empty ServerName
defers to http.Transport's default hostname check against the request
URL; set tlsServerName only when the certificate DNS name differs from
the host used to reach the server.

Related-To: OSPRH-33323

Signed-off-by: Daniel Pawlik <dpawlik@redhat.com>

1 of 1 new or added line in 1 file covered. (100.0%)

1318 of 2818 relevant lines covered (46.77%)

0.52 hits per line