Trust Root CA of Eventing curl Destination Service

Eventing
1

Hi,

I have the following environment:

  1. Couchbase server 6.6 enterprise edition with eventing service enabled
  2. Https REST service https://my-service.company.com with an X509 Certificate issued to my-service.company.com by certificate authority my-company-ca
  3. OnUpdate event handler uses curl to call https://my-service.company.com

How can I protected my curl call to my-service.company.com against man-in-the-middle attacks?
How can I make the curl call trust the my-company-ca root CA?

Regards,
Faris Ahmed

2

Hi Faris,

AFAIK, eventing does not handle these directly and delegates it to the OS. If you can configure your OS trust store to accept the certificate in question, eventing curl should as well.

Best Regards,
Siri