TLS_Verify
is an optional string
parameter which is available only for TLS clients. It specifies whether
the client clause requires the server to present a valid server
certificate during TLS handshake or not. The default is to require and
verify the server certificate. If the server certificate is not a valid
certificate, the TLS handshake fails and the TCP or SCTP connection is
disconnected. Certificate validity is determined by the root certificates
that are configured for the client clause with
TLS_CAFile
or TLS_CAPath
, and
other TLS configuration parameters, such as
TLS_ExpectedPeerName
and
TLS_SubjectAltNameURI
.
When
TLS_Verify
is set to value none
, the
server certificate is not verified. This may be useful during testing but
it's not recommended for production configurations. Here is an example of
using TLS_Verify
:
<AuthBy REST>
# TLS and other parameters
# While testing, skip certificate validation
TLS_Verify none
# More parameters
</AuthBy>