Find insecure TLS configuration
Recipe ID
org.openrewrite.kotlin.security.FindInsecureTls$KtRecipeArtifact
io.moderne.recipe:recipes-kotlinTrust-everything X509TrustManager implementations, allow-all HostnameVerifier lambdas / setters, deprecated SSL/TLS protocol versions, and plain-HTTP URL literals.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.kotlin.security.FindInsecureTls$KtRecipeIf the recipe isn’t available locally, install it with:
mod config recipes jar install io.moderne.recipe:recipes-kotlin:0.2.0Definition
This recipe runs the following recipes in order.
- Find
HostnameVerifier { _, _ -> true }lambdasorg.openrewrite.kotlin.security.FindAllowAllHostnameVerifierLambda$KtRecipe - Find
setHostnameVerifier(ALLOW_ALL)callsorg.openrewrite.kotlin.security.FindSetAllHostnameVerifier$KtRecipe - Find
X509TrustManagerimplementations with emptycheckServerTrustedorg.openrewrite.kotlin.security.FindTrustAllX509TrustManager$KtRecipe - Find
SSLContext.getInstance("SSL"/"TLSv1"/"TLSv1.1")callsorg.openrewrite.kotlin.security.FindWeakSslProtocol$KtRecipe - Find
URL("http://...")literal constructionsorg.openrewrite.kotlin.security.FindHttpUrlLiteral$KtRecipe
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats