diff --git a/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js b/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
index 194d06175..b3aa9cfd7 100644
--- a/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
+++ b/packages/node_modules/@node-red/nodes/core/network/21-httprequest.js
@@ -599,7 +599,18 @@ in your Node-RED user directory (${RED.settings.userDir}).
                 }
             } else {
                 if (msg.hasOwnProperty('rejectUnauthorized')) {
-                    opts.https = { rejectUnauthorized: msg.rejectUnauthorized };
+                    if (typeof msg.rejectUnauthorized === 'boolean') {
+                        opts.https = { rejectUnauthorized: msg.rejectUnauthorized }
+                    } else if (typeof msg.rejectUnauthorized === 'string') {
+                        if (msg.rejectUnauthorized.toLowerCase() === 'true' || msg.rejectUnauthorized.toLowerCase() === 'false') {
+                            opts.https = { rejectUnauthorized: (msg.rejectUnauthorized.toLowerCase() === 'true') }
+                        } else {
+                            node.warn(RED._("httpin.errors.rejectunauthorized-invalid"))
+                        }
+                    } else {
+                        node.warn(RED._("httpin.errors.rejectunauthorized-invalid"))
+                    }
+                    
                 }
             }
 
diff --git a/packages/node_modules/@node-red/nodes/locales/en-US/messages.json b/packages/node_modules/@node-red/nodes/locales/en-US/messages.json
index 7cde427f4..6d33e78aa 100644
--- a/packages/node_modules/@node-red/nodes/locales/en-US/messages.json
+++ b/packages/node_modules/@node-red/nodes/locales/en-US/messages.json
@@ -563,7 +563,8 @@
             "timeout-isnan": "Timeout value is not a valid number, ignoring",
             "timeout-isnegative": "Timeout value is negative, ignoring",
             "invalid-payload": "Invalid payload",
-            "invalid-url": "Invalid url"
+            "invalid-url": "Invalid url",
+            "rejectunauthorized-invalid": "msg.rejectUnauthorized should be a boolean"
         },
         "status": {
             "requesting": "requesting"