Skip to content

fix: verify SQL Server TLS certificates - #38

Merged
phantom-jacob merged 2 commits into
mainfrom
sodle/remediate-microsoftsqlserver-flashpoint
Jul 20, 2026
Merged

phantom-jacob merged 2 commits into
mainfrom
sodle/remediate-microsoftsqlserver-flashpoint

Conversation

@sodle-splunk

@sodle-splunk sodle-splunk commented Jul 18, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • require TLS by default for SQL Server connections
  • verify the certificate chain and configured hostname by default
  • use the system CA store by default and support a custom private CA bundle
  • retain explicit, documented compatibility opt-outs with a runtime warning
  • update generated documentation and notices

Tracking

  • PAPP-38248
  • PSAAS-31327
  • Parent epic: ESPM-5228

Validation

  • pre-commit run --all-files
  • python3 -m compileall

This pull request was prepared by Codex.

Tracking

  • PAPP: PAPP-38248
  • PSAAS: PSAAS-31327
  • Written by Codex.

@github-actions

Copy link
Copy Markdown

Merging this PR will release 2.3.9 with the following release notes:

2.3.9 (2026-07-18)

Connector release changes

  • Required TLS and enabled SQL Server certificate and hostname verification by default, with custom CA and explicit opt-out support.

@sodle-splunk
sodle-splunk marked this pull request as ready for review July 18, 2026 17:21

@phantom-jacob phantom-jacob left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by Codex after reviewing draft status, release-note formatting, code changes, and associated ticket scope.

@phantom-jacob
phantom-jacob merged commit 517b937 into main Jul 20, 2026
11 of 19 checks passed
@phantom-jacob
phantom-jacob deleted the sodle/remediate-microsoftsqlserver-flashpoint branch July 20, 2026 18:31
@splunk-soar-semantic-release

Copy link
Copy Markdown

🎉 This PR is included in version 2.3.9 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants