Bug#729965: Regression in curl if you use --insecure

[Pascal Weller]

Hi

It looks to me as if curl needs to use "0" for "CURLOPT_SSL_VERIFYPEER" and 
"CURLOPT_SSL_VERIFYHOST"
in case you use --insecure.

I found this patch that went in a later version of curl


--- curl-7.26.0.orig/src/tool_operate.c
+++ curl-7.26.0/src/tool_operate.c
@@ -982,7 +982,7 @@ int operate(struct Configurable *config,
         if(curlinfo->features & CURL_VERSION_SSL) {
           if(config->insecure_ok) {
             my_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L);
-            my_setopt(curl, CURLOPT_SSL_VERIFYHOST, 1L);
+            my_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L);
           }
           else {
             my_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L);




Cheers Pascal


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org