{"action":"created","issue":{"url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/15","repository_url":"https://api.github.com/repos/heroku/heroku-buildpack-redis","labels_url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/15/labels{/name}","comments_url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/15/comments","events_url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/15/events","html_url":"https://github.com/heroku/heroku-buildpack-redis/issues/15","id":175090375,"node_id":"MDU6SXNzdWUxNzUwOTAzNzU=","number":15,"title":"Enable certificate verification to prevent MITM attacks","user":{"login":"edmorley","id":501702,"node_id":"MDQ6VXNlcjUwMTcwMg==","avatar_url":"https://avatars3.githubusercontent.com/u/501702?v=4","gravatar_id":"","url":"https://api.github.com/users/edmorley","html_url":"https://github.com/edmorley","followers_url":"https://api.github.com/users/edmorley/followers","following_url":"https://api.github.com/users/edmorley/following{/other_user}","gists_url":"https://api.github.com/users/edmorley/gists{/gist_id}","starred_url":"https://api.github.com/users/edmorley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/edmorley/subscriptions","organizations_url":"https://api.github.com/users/edmorley/orgs","repos_url":"https://api.github.com/users/edmorley/repos","events_url":"https://api.github.com/users/edmorley/events{/privacy}","received_events_url":"https://api.github.com/users/edmorley/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-09-05T15:10:31Z","updated_at":"2019-01-03T09:32:54Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Currently the TLS/SSL offering for Heroku Redis uses self-signed certificates, meaning the connection is still vulnerable to MITM attacks.\n\nI've filed a ticket requesting that the certificates be signed (eg using a custom CA cert):\nhttps://help.heroku.com/tickets/396267\n\nIf/when that's resolved, this buildpack needs to be updated, to:\n- Specify the CA cert using the `CAfile` option\n- Enable verification using `verifyChain` / `verifyPeer` options\n\nThis may also require a newer version of openssl/stunnel.\n\nFor more details, see:\nhttps://www.stunnel.org/static/stunnel.html#SERVICE-LEVEL-OPTIONS\n"},"comment":{"url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/comments/451092467","html_url":"https://github.com/heroku/heroku-buildpack-redis/issues/15#issuecomment-451092467","issue_url":"https://api.github.com/repos/heroku/heroku-buildpack-redis/issues/15","id":451092467,"node_id":"MDEyOklzc3VlQ29tbWVudDQ1MTA5MjQ2Nw==","user":{"login":"edmorley","id":501702,"node_id":"MDQ6VXNlcjUwMTcwMg==","avatar_url":"https://avatars3.githubusercontent.com/u/501702?v=4","gravatar_id":"","url":"https://api.github.com/users/edmorley","html_url":"https://github.com/edmorley","followers_url":"https://api.github.com/users/edmorley/followers","following_url":"https://api.github.com/users/edmorley/following{/other_user}","gists_url":"https://api.github.com/users/edmorley/gists{/gist_id}","starred_url":"https://api.github.com/users/edmorley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/edmorley/subscriptions","organizations_url":"https://api.github.com/users/edmorley/orgs","repos_url":"https://api.github.com/users/edmorley/repos","events_url":"https://api.github.com/users/edmorley/events{/privacy}","received_events_url":"https://api.github.com/users/edmorley/received_events","type":"User","site_admin":false},"created_at":"2019-01-03T09:32:54Z","updated_at":"2019-01-03T09:32:54Z","author_association":"CONTRIBUTOR","body":"> redis-py has just changed the default SSL verification mode, which means connections to Heroku Redis instances fail with default settings.\r\n\r\nForgot to link to the upstream change:\r\nhttps://github.com/andymccurdy/redis-py/pull/1017\r\n\r\n> Any news on having custom certs?\r\n\r\nI've opened a ticket to ask for the current status:\r\nhttps://help.heroku.com/tickets/667970"}}
{"actor":{"display_login":"edmorley"}}