Merge pull request #18 from trendmicro/update_to_latest_version_v1.4.1

update to latest version: v1.4.1
trendmicro · Aug 28, 2024 · 52482d0 · 52482d0
2 parents 69f7893 + e55f342
commit 52482d0
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## 1.4.1 - 2024-08-27
+
+* Update README.md for certificate verification bypass
+
 ## 1.4.0 - 2024-08-23
 
 * Update README.md

diff --git a/README.md b/README.md
@@ -395,3 +395,9 @@ The communication channel between the client program or SDK and the Trend Vision
 The certificate employed by server-side TLS is a publicly-signed certificate from Trend Micro Inc, issued by a trusted Certificate Authority (CA), further bolstering security measures.
 
 The File Security SDK consistently adopts TLS as the default communication channel, prioritizing security at all times. It is strongly advised not to disable TLS in a production environment while utilizing the File Security SDK, as doing so could compromise the integrity and confidentiality of transmitted data.
+
+## Disabling certificate verification
+
+For customers who need to enable TLS channel encryption without verifying the provided CA certificate, the Node.js environment variable `NODE_TLS_REJECT_UNAUTHORIZED` can be set to `0`.
+
+When `NODE_TLS_REJECT_UNAUTHORIZED` is set to `0`, certificate validation is disabled for TLS connections, which compromises the security of the connection. Therefore, this configuration should only be used in testing environments.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.4.0
+1.4.1
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "file-security-sdk",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Vision One File Security API library in TypeScript",
   "main": "index.js",
   "engines": {