Skip to content

Conversation

@gregmeldrum
Copy link
Collaborator

What is the purpose of this change?

Add a boolean configuration option (ssl_verify) to disable SSL certificate verification for individual A2A proxied agents. This allows connecting to remote A2A agents using self-signed certificates in development/testing environments.

How was this change implemented?

  • config.py: Added ssl_verify field to A2AProxiedAgentConfig with default value True
  • component.py: Applied ssl_verify setting to httpx clients for both agent card fetching and task invocation
  • proxies.md: Added documentation section on SSL verification with security warnings
  • a2a_proxy_example.yaml: Added commented example showing ssl_verify: false usage

Key Design Decisions

  • Default is True (verify certificates) to maintain security by default
  • Setting applies to both agent card fetching and task invocations for consistency
  • Per-agent configuration allows mixed environments (some verified, some not)

How was this change tested?

  • Unit tests: Added 7 new tests in tests/unit/agent/proxies/a2a/test_config.py
  • Ruff linting: All checks pass
  • Manual testing: Not yet tested with actual self-signed certificate

Is there anything the reviewers should focus on/be aware of?

  • Security documentation warns users about the risks of disabling SSL verification
  • The setting only affects HTTPS connections; HTTP connections are unaffected

gregmeldrum and others added 5 commits January 19, 2026 15:13
…cates

Add a boolean configuration option to disable SSL certificate verification
for individual A2A proxied agents. This allows connecting to remote A2A
agents using self-signed certificates in development/testing environments.

Changes:
- Add ssl_verify field to A2AProxiedAgentConfig (default: true)
- Apply ssl_verify to httpx clients for agent card fetching and task invocation
- Add documentation section on SSL verification with security warnings
- Add example configuration in a2a_proxy_example.yaml
- Add unit tests for the new configuration option

Co-Authored-By: Claude <[email protected]>
Remove duplicate docstring, add missing blank line between classes,
and add trailing newline to satisfy ruff linting.

Co-Authored-By: Claude Opus 4.5 <[email protected]>
- Add warning log when SSL verification is disabled
- Fix missing blank lines between class definitions (PEP 8)

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@sonarqube-solacecloud
Copy link

Quality Gate failed Quality Gate failed

Failed conditions
B Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE SonarQube for IDE

Copy link
Collaborator

@RohanSreelesh RohanSreelesh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LG

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants