Skip to content

feat: 为每个大模型服务增加"跳过 TLS 证书校验"开关 - #37

Merged
NingNing0111 merged 1 commit into
OpenFuckJob:masterfrom
afterexam:feat/insecure-tls-skip
Sep 17, 2026
Merged

NingNing0111 merged 1 commit into
OpenFuckJob:masterfrom
afterexam:feat/insecure-tls-skip

Conversation

@afterexam

Copy link
Copy Markdown
Contributor

背景

Closes #35

自建/内网大模型服务常使用自签证书,此前客户端写死校验 TLS 证书,导致这类服务无法连接。

改动

  • 每个大模型服务(主用 + 备用条目)新增 insecure 开关,默认关闭
  • 覆盖三条链路:聊天请求、连接测试、模型列表获取
  • 配置里持久化 insecure 字段,老配置缺字段时默认 false
  • UI 上附红色风险提示:仅用于自签证书的内网/自建服务,开启后中间人可窃取传输内容(含 API Key),切勿对公网服务开启

验证

  • 前端:vitest 217/217 通过,tsc 零错误,生产构建成功
  • Rust:以 CI 的 cargo check / cargo test 为准

@afterexam

Copy link
Copy Markdown
Contributor Author

@NingNing0111 你好,CI 显示 Action required,麻烦有空 approve 一下 workflow,谢谢!

Adds an `insecure` flag (default false) to each LLM service entry so users
with self-signed certificates on self-hosted/intranet endpoints can bypass
TLS verification. Applies to chat requests, connection tests and model
listing. UI carries an explicit MITM risk warning; never enable for public
endpoints.
@afterexam
afterexam force-pushed the feat/insecure-tls-skip branch from 9d8dfb3 to b1caf55 Compare September 17, 2026 12:53
@NingNing0111
NingNing0111 merged commit 3360922 into OpenFuckJob:master Sep 17, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

希望验证大模型api可选择忽略ssl证书验证

2 participants