Add an option to disable TLS certificate checks about aws HOT 6 CLOSED

Wouldn't it be better to try to find and fix the bug in tls? Not checking certificates makes MITM attacks possible... And if you truly believe you're in a benign environment, you could use HTTP without S. :)

from aws.

I'm still open to a pull request for this though, but I wouldn't make non-checking the default.

from aws.

"you could use HTTP without S", how do I configure that?

from aws.

Use something like "s3 HTTP s3EndpointUsClassic False" or "defServiceConfig
{ s3Protocol = HTTP }".

http://hackage.haskell.org/package/aws-0.9/docs/Aws-S3-Core.html

2014-06-29 17:22 GMT+02:00 Tomas Carnecky [email protected]:

"you could use HTTP without S", how do I configure that?

—
Reply to this email directly or view it on GitHub
#105 (comment).

from aws.

Thanks. What also works is debugServiceConfig instead of defServiceConfig, as per documentation that uses HTTP instead of HTTPS.

from aws.

Just for the record, I still see this issue when trying to use this package on an ec2 instance when trying to interact with s3

from aws.