Download tool with "Insecure" option to not verify the Certificate in ssl connections

[chvizda]

Hi all

Its about the Download tool for SSL API Connections.

In serveral environments (especially for testing) it is not possible to install the Server and client certificates correctly. It would be helpful to have an "Insecure" option in the download tool to activate the following curl option:

-k, --insecure

(TLS) By default, every SSL connection curl makes is verified to be secure. This option allows curl to proceed and operate even for server connections otherwise considered insecure.

The detour over the RUN command is very complicated.

Many thanks

Steffen

[AA007]

@chvizda what is the option of this detour and run command idea you are talking about?
Can you share a process?
As alteryx has not responded to our request anyway.

[VojtechT]

Hi @chvizda , I believe this has been implemented in 22.3, but due to security reasons in a little bit different way. 

Instead of user saying "I don't need to do SSL validation here", which would basically turn off an important security principle and we cannot let users to do that in general, there is an option to provide a list of domains for which the SSL validation can be skipped. See more here: https://help.alteryx.com/20231/designer/peer-validation-allow-list

The important note to point out is that the list can be provided only by admins.