René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Improvement: Enable secure SSL certificate and hostname verification for internal traffic","articleBody":"### The required feature described as a wish\n\nFor internal traffic, it is common practice that HTTPS/TLS is used, but:\n- the TLS certificates are often self-signed, or issued by an internal CA (not a public one like Let’s Encrypt).\n- Sometimes services just use the server’s IP address instead of a DNS name.\n\nDisabling SSL certificate and hostname verification increases compatibility, allowing CloudStack to interoperate with a wide range of hypervisors, networking equipment, and storage devices. This behavior is intentional by design, to ensure broader support across diverse environments. For example,\n- Connect to Vmware vCenter\n- Connect to Xenserver\n- Connect to some external storage or network devices\n\nWe could provide more flexibility and also stronger security, including but not limited to\n\n- Allow users to bring their own SSL certificates\n- Support host name (DNS) instead of host ip in SSL communication\n- Add an option for enforce SSL certificate verification\n- Add an option for enforce hostname verification\n","author":{"url":"https://github.com/weizhouapache","@type":"Person","name":"weizhouapache"},"datePublished":"2025-09-23T12:01:49.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/11699/cloudstack/issues/11699"}