topic Re: Trust any certificate drawbacks in Cortex XSOAR Discussions

Trust any certificate drawbacks

DP696 — Thu, 19 Jan 2023 14:49:25 GMT

Hi,

What's the drawback of enabling 'trust any certificate' in integration?

Thanks

Re: Trust any certificate drawbacks

arnarayanan — Fri, 20 Jan 2023 13:48:35 GMT

It is the same as how people sometimes ignore their browser certificate error. An attacker can potentially impersonate an endpoint and steal the credentials.

Re: Trust any certificate drawbacks

nikoolayy1 — Sun, 22 Jan 2023 13:14:16 GMT

You can create a CA cert with openss, then from it create signed certs and load the CA cert on the VM that hosts the XSOAR.

https://xsoar.pan.dev/docs/reference/articles/trust-custom-certificates