From 774ae0574837209e6d1817fbb636ac9943659488 Mon Sep 17 00:00:00 2001
From: Knacky <knckydev@gmail.com>
Date: Sun, 21 Jun 2026 20:57:41 +0200
Subject: [PATCH] fix(frontend): default verify_tls checkbox to unchecked + add
 helper text
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flip useState(true) → useState(false) and delete-reset from true → false
so a freshly-created C2 config does not block self-signed Mythic instances.
Add hint paragraph below the checkbox matching FormField hint style
(text-[12px] text-graphite): "Leave unchecked for lab Mythic with
self-signed certificates."

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 frontend/src/components/C2ConfigCard.tsx | 35 ++++++++++++++----------
 1 file changed, 20 insertions(+), 15 deletions(-)

diff --git a/frontend/src/components/C2ConfigCard.tsx b/frontend/src/components/C2ConfigCard.tsx
index 1363310..ced6190 100644
--- a/frontend/src/components/C2ConfigCard.tsx
+++ b/frontend/src/components/C2ConfigCard.tsx
@@ -24,7 +24,7 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
 
   const [url, setUrl] = useState('');
   const [token, setToken] = useState('');
-  const [verifyTls, setVerifyTls] = useState(true);
+  const [verifyTls, setVerifyTls] = useState(false);
   const [replaceToken, setReplaceToken] = useState(false);
   const [showDeleteConfirm, setShowDeleteConfirm] = useState(false);
   const [testResult, setTestResult] = useState<{ ok: boolean; message: string } | null>(null);
@@ -71,7 +71,7 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
       push('C2 configuration removed', 'success');
       setUrl('');
       setToken('');
-      setVerifyTls(true);
+      setVerifyTls(false);
       setReplaceToken(false);
     } catch (err) {
       push(extractApiError(err, 'Could not remove C2 configuration'), 'error');
@@ -166,19 +166,24 @@ export function C2ConfigCard({ engagementId }: C2ConfigCardProps): JSX.Element {
             )}
           </FormField>
 
-          <div className="flex items-center gap-sm">
-            <input
-              id="c2-verify-tls"
-              data-testid="c2-verify-tls"
-              type="checkbox"
-              checked={verifyTls}
-              onChange={(e) => setVerifyTls(e.target.checked)}
-              disabled={disabled}
-              className="h-4 w-4 accent-primary"
-            />
-            <label htmlFor="c2-verify-tls" className="text-[14px] text-ink">
-              Verify TLS certificate
-            </label>
+          <div className="flex flex-col gap-xs">
+            <div className="flex items-center gap-sm">
+              <input
+                id="c2-verify-tls"
+                data-testid="c2-verify-tls"
+                type="checkbox"
+                checked={verifyTls}
+                onChange={(e) => setVerifyTls(e.target.checked)}
+                disabled={disabled}
+                className="h-4 w-4 accent-primary"
+              />
+              <label htmlFor="c2-verify-tls" className="text-[14px] text-ink">
+                Verify TLS certificate
+              </label>
+            </div>
+            <p className="text-[12px] text-graphite">
+              Leave unchecked for lab Mythic with self-signed certificates.
+            </p>
           </div>
 
           <div className="flex items-center gap-md flex-wrap">