Kuma CP/DP TLS InsecureSkipVerify 配置缺陷分析

漏洞概述 漏洞类型：当 CA 证书未提供时， 中 被设置为 ，导致 TLS 证书验证被跳过。 根因：在 中，当 为空时，代码将 ，并打印警告日志 影响范围： - 涉及文件： 、 、 、 、 、 、 、 、 - 影响组件：Kuma 控制平面（CP）与数据平面（DP）之间的 TLS 通信 修复方案 1. ：在 中，当 为空时，设置 ，并打印警告日志。 2. ：在 函数中，当 为空时，设置 ，并打印警告日志。 3. ：在 中，当 为空时，设置 ，并打印警告日志。 4. ：在 中，当 为空时，设置 ，并打印警告日志。 5. ：在 中，当 为空时，设置 ，并打印警告日志。 6. ：在 中，当 为空时，设置 ，并打印警告日志。 7. ：在 中，当 为空时，设置 ，并打印警告日志。 8. ：在 中，当 为空时，设置 ，并打印警告日志。 9. ：在 中，当 为空时，设置 ，并打印警告日志。 POC 代码 ```go // pkg/kuma-dp/cmd/run.go func NewClient(opts kuma_cmd.NewCmdOpts, roots kuma_cmd.RootContext) cobra.Command { cmd.PersistentFlags().DurationVar(&cfg.Dataplane.DrainTime, "drain-time", 30time.Second, "Time for which connection on Kuma DP drains.") cmd.PersistentFlags().StringVar(&cfg.Dataplane.URL, "cp-address", "http://localhost:5678", "URL of the Control Plane Dataplane Server. Example: https://controlPlaneServer:5678") cmd.PersistentFlags().StringVar(&cfg.ControlPlane.CaCertFile, "ca-cert-file", cfg.ControlPlane.CaCertFile, "Path to CA cert for which connections to the Control Plane will be verified if HTTPS is used") cmd.PersistentFlags().BoolVar(&cfg.ControlPlane.TlsSkipVerify, "skip-verify", cfg.ControlPlane.TlsSkipVerify, "Skip TLS verification of the Control Plane certificate (insecure, for development/testing only)") cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.DrainTime = 30 time.Second cfg.Dataplane.Drain

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Kuma CP/DP TLS InsecureSkipVerify 配置缺陷分析

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Kuma CP/DP TLS InsecureSkipVerify 配置缺陷分析

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！