Skip to content

[HIGH-8] verify_client_certificate() Dead Code #181

Description

@BillyOutlast

Finding HIGH-8

Severity: LOW (dead code)
File: libraries/droplet/src/ssl.rs:69

Description

Certificate verification function exists but is never called.

Proof

grep -rn 'verify_client_certificate' --include='*.rs'
# Only definition found, no callers

Impact

  • Client certificates never validated
  • mTLS security broken

Remediation

Wire into connection handshake or remove dead code.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions