7 Oct 2026
Merged
Fix the inverted insecure_skip_verify TLS option
PR #5134 · closes #1467
The Prometheus remote-write exporter passed tls_config's insecure_skip_verify straight through as the verify argument to requests.post, which inverted it: True kept certificate checks on, and False — the value that reads as the safe choice — silently turned them off, leaving metric exports open to interception by anything on the network path. The fix is one word, negating the value so the option means what the Prometheus remote_write setting it is named after means. It shipped with a regression test parametrized over both values that fails before the change and passes after, plus a manual check against a self-signed HTTPS server.