Verify certificate chain and hostname
Configure the com.glide.communications.httpclient.verify_hostname property to prevent man-in-the-middle-attacks by ensuring that the certification verification process is executed.
When the com.glide.communications.httpclient.verify_hostname system property is not set to the secure value of true, the hostname and certificate chain presented by remote hosts during a TLS connection initiated from the ServiceNow instance are not validated.
Ensure that the com.glide.communications.httpclient.verify_hostname system property is set to the secure value of true.
More information
| Attribute | Description |
|---|---|
| Configuration name | com.glide.communications.httpclient.verify_hostname |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Communications |
| Security risk | - Severity score: High - CVSS score: 7.4 - Security risk details: This could compromise the security of the TLS connection and allow person-in-the-middle attacks, where communications between two parties are intercepted. This may lead to sensitive data disclosure. |
| Dependencies and prerequisites | None |
| Functional impact | Verifies hostname and certificate chain presented by remote secure socket layer (SSL) hosts. Set this property to true to secure against Man-in-the-middle (MITM) attacks.Note: This property overrides the com.glide.communications.trustmanager_trust_all, property. |
Parent Topic:Communications