[GH-ISSUE #98] Option to accept self-signed SSL certificate or expired SSL certificate (in HTTPS) #23

Closed
opened 2026-09-29 12:58:42 +00:00 by slurdge · 10 comments
Owner

Originally created by @djm1 on GitHub (Dec 12, 2022).
Original GitHub issue: https://github.com/slurdge/goeland/issues/98

Hello,

would it be possible (or is it already possible?) to add an option to configuration file to accept self-signed SSL certificates (certificate signed by unknown authority) and expired SSL certificates in HTTPS connections?

I'm aware about the security risk, but sometimes it is difficult to get the SSL certificate corrected / updated.

Thank you

Originally created by @djm1 on GitHub (Dec 12, 2022). Original GitHub issue: https://github.com/slurdge/goeland/issues/98 Hello, would it be possible (or is it already possible?) to add an option to configuration file to accept self-signed SSL certificates (certificate signed by unknown authority) and expired SSL certificates in HTTPS connections? I'm aware about the security risk, but sometimes it is difficult to get the SSL certificate corrected / updated. Thank you
Author
Owner

@slurdge commented on GitHub (Dec 12, 2022):

Yes, you can use email.allow-insecure in config, as such:

[email]
allow-insecure = true
<!-- gh-comment-id:1346593961 --> @slurdge commented on GitHub (Dec 12, 2022): Yes, you can use `email.allow-insecure` in config, as such: ``` [email] allow-insecure = true ```
Author
Owner

@djm1 commented on GitHub (Dec 12, 2022):

Hello,Thank you for your quick reply.If I'm not mistaken, provided option is covering only SMTP server's SSL certificate. Would it be possible to create similar option for object "source"? - in example specific HTTPS side do not have trusted or have expired HTTPS certificate.Thank you--S pozdravomMiroslav @.***
-------- Original message --------From: slurdge @.> Date: 12/12/22 15:21 (GMT+01:00) To: slurdge/goeland @.> Cc: djm1 @.>, Author @.> Subject: Re: [slurdge/goeland] Option to accept self-signed SSL certificate or
expired SSL certificate (in HTTPS) (Issue #98)
Yes, you can use email.allow-insecure in config, as such:
[email]
allow-insecure = true

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: @.***>

<!-- gh-comment-id:1347241744 --> @djm1 commented on GitHub (Dec 12, 2022): Hello,Thank you for your quick reply.If I'm not mistaken, provided option is covering only SMTP server's SSL certificate. Would it be possible to create similar option for object "source"? - in example specific HTTPS side do not have trusted or have expired HTTPS certificate.Thank you--S pozdravomMiroslav ***@***.*** -------- Original message --------From: slurdge ***@***.***> Date: 12/12/22 15:21 (GMT+01:00) To: slurdge/goeland ***@***.***> Cc: djm1 ***@***.***>, Author ***@***.***> Subject: Re: [slurdge/goeland] Option to accept self-signed SSL certificate or expired SSL certificate (in HTTPS) (Issue #98) Yes, you can use email.allow-insecure in config, as such: [email] allow-insecure = true —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: ***@***.***>
Author
Owner

@slurdge commented on GitHub (Dec 12, 2022):

Sorry I misunderstood. I'll have to look at the library used to retrieve feeds

<!-- gh-comment-id:1347387387 --> @slurdge commented on GitHub (Dec 12, 2022): Sorry I misunderstood. I'll have to look at the library used to retrieve feeds
Author
Owner

@djm1 commented on GitHub (Dec 13, 2022):

Thank you, I will wait for your review and feedback :-)--S pozdravomMiroslav @.***
-------- Original message --------From: slurdge @.> Date: 12/12/22 22:47 (GMT+01:00) To: slurdge/goeland @.> Cc: djm1 @.>, Author @.> Subject: Re: [slurdge/goeland] Option to accept self-signed SSL certificate or
expired SSL certificate (in HTTPS) (Issue #98)
Sorry I misunderstood. I'll have to look at the library used to retrieve feeds

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: @.***>

<!-- gh-comment-id:1348211530 --> @djm1 commented on GitHub (Dec 13, 2022): Thank you, I will wait for your review and feedback :-)--S pozdravomMiroslav ***@***.*** -------- Original message --------From: slurdge ***@***.***> Date: 12/12/22 22:47 (GMT+01:00) To: slurdge/goeland ***@***.***> Cc: djm1 ***@***.***>, Author ***@***.***> Subject: Re: [slurdge/goeland] Option to accept self-signed SSL certificate or expired SSL certificate (in HTTPS) (Issue #98) Sorry I misunderstood. I'll have to look at the library used to retrieve feeds —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: ***@***.***>
Author
Owner

@djm1 commented on GitHub (Jan 10, 2023):

Hello,

did you have a time to look on this topic, please?

Thank you

On Tue, Dec 13, 2022 at 12:10 PM Miroslav Vrabel @.***> wrote:

Thank you, I will wait for your review and feedback :-)

--
S pozdravom
Miroslav Vrabel
@.***

-------- Original message --------
From: slurdge @.>
Date: 12/12/22 22:47 (GMT+01:00)
To: slurdge/goeland @.
>
Cc: djm1 @.>, Author @.>
Subject: Re: [slurdge/goeland] Option to accept self-signed SSL
certificate or expired SSL certificate (in HTTPS) (Issue #98)

Sorry I misunderstood. I'll have to look at the library used to retrieve
feeds

—
Reply to this email directly, view it on GitHub
https://github.com/slurdge/goeland/issues/98#issuecomment-1347387387,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AEKD6A7Y2LFMW367OBYBZ73WM6MO3ANCNFSM6AAAAAAS36U6PI
.
You are receiving this because you authored the thread.Message ID:
@.***>

--

S pozdravom
Miroslav Vrabel
@.***

<!-- gh-comment-id:1377022243 --> @djm1 commented on GitHub (Jan 10, 2023): Hello, did you have a time to look on this topic, please? Thank you On Tue, Dec 13, 2022 at 12:10 PM Miroslav Vrabel ***@***.***> wrote: > Thank you, I will wait for your review and feedback :-) > > > > -- > S pozdravom > Miroslav Vrabel > ***@***.*** > > > -------- Original message -------- > From: slurdge ***@***.***> > Date: 12/12/22 22:47 (GMT+01:00) > To: slurdge/goeland ***@***.***> > Cc: djm1 ***@***.***>, Author ***@***.***> > Subject: Re: [slurdge/goeland] Option to accept self-signed SSL > certificate or expired SSL certificate (in HTTPS) (Issue #98) > > Sorry I misunderstood. I'll have to look at the library used to retrieve > feeds > > — > Reply to this email directly, view it on GitHub > <https://github.com/slurdge/goeland/issues/98#issuecomment-1347387387>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AEKD6A7Y2LFMW367OBYBZ73WM6MO3ANCNFSM6AAAAAAS36U6PI> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> > -- S pozdravom Miroslav Vrabel ***@***.***
Author
Owner

@slurdge commented on GitHub (Jan 10, 2023):

Hello @djm1 , yes, I did look into it.
I also have a beginning of a solution however I don't like it much, that's why I am thinking a bit more about it. Sorry

<!-- gh-comment-id:1377340580 --> @slurdge commented on GitHub (Jan 10, 2023): Hello @djm1 , yes, I did look into it. I also have a beginning of a solution however I don't like it much, that's why I am thinking a bit more about it. Sorry
Author
Owner

@djm1 commented on GitHub (Jan 10, 2023):

Hello,

no problem, thank you for the update. The situation from my side is that
not all website owners are refreshing the SSL certificates, or not all
website owners are using the SSL certificates signed by trusted authority.
I think it is not possible to cover all website owners to get the SSL
certificates configured properly so I'm searching for alternative solution

  • probably not the best one, but it could help to solve some of the issues.

Thank you

On Tue, Jan 10, 2023 at 3:10 PM slurdge @.***> wrote:

Hello @djm1 https://github.com/djm1 , yes, I did look into it.
I also have a beginning of a solution however I don't like it much, that's
why I am thinking a bit more about it. Sorry

—
Reply to this email directly, view it on GitHub
https://github.com/slurdge/goeland/issues/98#issuecomment-1377340580,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AEKD6A5CS4S7N37Y3HCVRPLWRVUUTANCNFSM6AAAAAAS36U6PI
.
You are receiving this because you were mentioned.Message ID:
@.***>

--

S pozdravom
Miroslav Vrabel
@.***

<!-- gh-comment-id:1377485852 --> @djm1 commented on GitHub (Jan 10, 2023): Hello, no problem, thank you for the update. The situation from my side is that not all website owners are refreshing the SSL certificates, or not all website owners are using the SSL certificates signed by trusted authority. I think it is not possible to cover all website owners to get the SSL certificates configured properly so I'm searching for alternative solution - probably not the best one, but it could help to solve some of the issues. Thank you On Tue, Jan 10, 2023 at 3:10 PM slurdge ***@***.***> wrote: > Hello @djm1 <https://github.com/djm1> , yes, I did look into it. > I also have a beginning of a solution however I don't like it much, that's > why I am thinking a bit more about it. Sorry > > — > Reply to this email directly, view it on GitHub > <https://github.com/slurdge/goeland/issues/98#issuecomment-1377340580>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AEKD6A5CS4S7N37Y3HCVRPLWRVUUTANCNFSM6AAAAAAS36U6PI> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> > -- S pozdravom Miroslav Vrabel ***@***.***
Author
Owner

@slurdge commented on GitHub (Jan 18, 2023):

This will be available in the next release, with an option for each source.

<!-- gh-comment-id:1387158796 --> @slurdge commented on GitHub (Jan 18, 2023): This will be available in the next release, with an option for each source.
Author
Owner

@slurdge commented on GitHub (Jan 18, 2023):

Please check 0.13.0

<!-- gh-comment-id:1387189021 --> @slurdge commented on GitHub (Jan 18, 2023): Please check 0.13.0
Author
Owner

@djm1 commented on GitHub (Jan 18, 2023):

Great, thank you for adding this feature. I will test it in new release.

On Wed, Jan 18, 2023 at 3:25 PM slurdge @.***> wrote:

This will be available in the next release, with an option for each source.

—
Reply to this email directly, view it on GitHub
https://github.com/slurdge/goeland/issues/98#issuecomment-1387158796,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AEKD6A3R5YT77O3JMBT5YTDWS74NDANCNFSM6AAAAAAS36U6PI
.
You are receiving this because you were mentioned.Message ID:
@.***>

--

S pozdravom
Miroslav Vrabel
@.***

<!-- gh-comment-id:1387197857 --> @djm1 commented on GitHub (Jan 18, 2023): Great, thank you for adding this feature. I will test it in new release. On Wed, Jan 18, 2023 at 3:25 PM slurdge ***@***.***> wrote: > This will be available in the next release, with an option for each source. > > — > Reply to this email directly, view it on GitHub > <https://github.com/slurdge/goeland/issues/98#issuecomment-1387158796>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AEKD6A3R5YT77O3JMBT5YTDWS74NDANCNFSM6AAAAAAS36U6PI> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> > -- S pozdravom Miroslav Vrabel ***@***.***
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: slurdge/goeland#23
No description provided.