From 068078fde85139e652897416625d663f5941c134 Mon Sep 17 00:00:00 2001 From: subsection Date: Mon, 24 Feb 2014 16:52:35 +0100 Subject: [PATCH] Added warning when registering insecure state --- lib/logstash/inputs/imap.rb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/logstash/inputs/imap.rb b/lib/logstash/inputs/imap.rb index d19ba986d..49a19b29d 100644 --- a/lib/logstash/inputs/imap.rb +++ b/lib/logstash/inputs/imap.rb @@ -35,6 +35,10 @@ class LogStash::Inputs::IMAP < LogStash::Inputs::Base require "net/imap" # in stdlib require "mail" # gem 'mail' + if @secure and not @verify_cert + @logger.warn("Running IMAP without verifying the certificate may grant attackers unauthorized access to your mailbox or data") + end + if @port.nil? if @secure @port = 993