diff --git a/scripts/arcanist.php b/scripts/arcanist.php index 0374f78f..63aaf939 100755 --- a/scripts/arcanist.php +++ b/scripts/arcanist.php @@ -208,6 +208,12 @@ try { HTTPSFuture::setGlobalCABundleFromPath($ca_bundle); } + $blind_key = 'https.blindly-trust-domains'; + $blind_trust = $working_copy->getConfigFromAnySource($blind_key); + if ($blind_trust) { + HTTPSFuture::setBlindlyTrustDomains($blind_trust); + } + if ($need_conduit) { if (!$conduit_uri) { diff --git a/src/configuration/ArcanistSettings.php b/src/configuration/ArcanistSettings.php index da9167c6..3fcf573c 100644 --- a/src/configuration/ArcanistSettings.php +++ b/src/configuration/ArcanistSettings.php @@ -103,6 +103,12 @@ final class ArcanistSettings { "behind https signed by your organization's internal CA.", 'example' => 'support/yourca.pem' ), + 'https.blindly-trust-domains' => array( + 'type' => 'list', + 'help' => 'List of domains to blindly trust SSL certificates for. '. + 'Disables peer verification.', + 'example' => '["secure.mycompany.com"]', + ), 'browser' => array( 'type' => 'string', 'help' =>