summary refs log tree commit diff
path: root/changelog.d
diff options
context:
space:
mode:
authorDenis Kasak <dkasak@termina.org.uk>2023-10-23 11:38:51 +0000
committerGitHub <noreply@github.com>2023-10-23 07:38:51 -0400
commit3a0aa6fe76c43b09a0e13785894df2a285396c10 (patch)
tree12bc9cdec02b0db68f8e348d65fc18cfedad524b /changelog.d
parentRemove the last reference to event_txn_id. (#16521) (diff)
downloadsynapse-3a0aa6fe76c43b09a0e13785894df2a285396c10.tar.xz
Force TLS certificate verification in registration script. (#16530)
If using the script remotely, there's no particularly convincing reason
to disable certificate verification, as this makes the connection
interceptible.

If on the other hand, the script is used locally (the most common use
case), you can simply target the HTTP listener and avoid TLS altogether.
This is what the script already attempts to do if passed a homeserver
configuration YAML file.
Diffstat (limited to 'changelog.d')
-rw-r--r--changelog.d/16530.bugfix1
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/16530.bugfix b/changelog.d/16530.bugfix
new file mode 100644
index 0000000000..503ea0af20
--- /dev/null
+++ b/changelog.d/16530.bugfix
@@ -0,0 +1 @@
+Force TLS certificate verification in user registration script.