Project: talendesb
Issue TESB-7621: Restrict conduits-common configuration to localhost
As a developer or admin I want to be able to communicate with public services on the internet secured via HTTPS. The conduits-common configuration we currently provide by default with the runtime is valid for all clients, which communicate with an HTTPS based endpoint. This works fine for clients accessing our samples as the configuration points to a keystore with certificates suitable for the samples. Clients accessing services hosted on public servers, e.g. salesforce services, fail to do so, because the keystore we provide does not contain the required root certificates from the public certification authorities. On the other side these certificates are included in the default keystore that comes with the JRE. Therefore we should restrict the pattern for the conduits-common configuration to https on localhost, e.g. url = https\://localhost.* This would also restrict disabling the CN checks to the localhost. Documentation also has to be updated.
Story points: 1