Skip to content

Commit 9409883

Browse files
cjihrigTrott
authored andcommitted
doc: document NODE_TLS_REJECT_UNAUTHORIZED
This commit documents the NODE_TLS_REJECT_UNAUTHORIZED environment variable so that the world can know how potentially dangerous it is. PR-URL: #24289 Fixes: #24284 Reviewed-By: Vse Mozhet Byt <[email protected]> Reviewed-By: James M Snell <[email protected]> Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Ruben Bridgewater <[email protected]> Reviewed-By: Trivikram Kamat <[email protected]>
1 parent e2a8e32 commit 9409883

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

doc/api/cli.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -681,6 +681,12 @@ Path to the file used to store the persistent REPL history. The default path is
681681
`~/.node_repl_history`, which is overridden by this variable. Setting the value
682682
to an empty string (`''` or `' '`) disables persistent REPL history.
683683

684+
### `NODE_TLS_REJECT_UNAUTHORIZED=value`
685+
686+
If `value` equals `'0'`, certificate validation is disabled for TLS connections.
687+
This makes TLS, and HTTPS by extension, insecure. The use of this environment
688+
variable is strongly discouraged.
689+
684690
### `NODE_V8_COVERAGE=dir`
685691

686692
When set, Node.js will begin outputting [V8 JavaScript code coverage][] to the

0 commit comments

Comments
 (0)