Disabling Verify SSL certificate checking a security issue?

rhoekman · January 9, 2021, 9:23am

When MainWP is syncing and you have a site with an expired certificate, it’s not possible to continu syncing if you have “Verify SSL certificate” enabled in Advanced Settings. Which makes totally sense.

When disabling this checking in the Advanced Settings it’s able to connect with the MainWP Child.

Which got me courious about how this connection is established between MainWP and MainWP Child. Is this an independant encrypted connection between the two or does it fall back to an unencrypted session?

cad861 · January 10, 2021, 2:26am

I don’t know the answer but would be interested to know too. I wonder if there is scope for enhancement to monitor the expiry date of a certificate too…

bogdan · January 11, 2021, 3:21pm

Hi,

We have a help doc that explains how the sync process works. Please see here.

rhoekman · January 11, 2021, 4:51pm

Ah, thanks Bogdan!

system · January 12, 2021, 4:51pm

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.