diff --git a/CHANGELOG.md b/CHANGELOG.md index 5a9eb0d..69e0c31 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # CHANGELOG +## 1.4.1 - 2024-08-27 + +* Update README.md for certificate verification bypass + ## 1.4.0 - 2024-08-23 * Update README.md diff --git a/README.md b/README.md index b42e3de..7fcdcb2 100644 --- a/README.md +++ b/README.md @@ -395,3 +395,9 @@ The communication channel between the client program or SDK and the Trend Vision The certificate employed by server-side TLS is a publicly-signed certificate from Trend Micro Inc, issued by a trusted Certificate Authority (CA), further bolstering security measures. The File Security SDK consistently adopts TLS as the default communication channel, prioritizing security at all times. It is strongly advised not to disable TLS in a production environment while utilizing the File Security SDK, as doing so could compromise the integrity and confidentiality of transmitted data. + +## Disabling certificate verification + +For customers who need to enable TLS channel encryption without verifying the provided CA certificate, the Node.js environment variable `NODE_TLS_REJECT_UNAUTHORIZED` can be set to `0`. + +When `NODE_TLS_REJECT_UNAUTHORIZED` is set to `0`, certificate validation is disabled for TLS connections, which compromises the security of the connection. Therefore, this configuration should only be used in testing environments. diff --git a/VERSION b/VERSION index 88c5fb8..347f583 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.4.0 +1.4.1 diff --git a/package.json b/package.json index ae1ce8b..4f61709 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "file-security-sdk", - "version": "1.4.0", + "version": "1.4.1", "description": "Vision One File Security API library in TypeScript", "main": "index.js", "engines": {