curl-library
CURLOPT_SSL_VERIFYHOST won't fail unless CURLOPT_SSL_VERIFYPEER is enabled
From: Jef Gearhart <jef_at_tpssys.com>
Date: Tue, 08 Jul 2008 11:48:10 -0500
Date: Tue, 08 Jul 2008 11:48:10 -0500
Maybe this was intentional? If I try to use CURLOPT_SSL_VERIFYHOST (set
to 2), but disable CURLOPT_SSL_VERIFYPEER, the connection succeeds, even
though the Common name doesn't match the host name I connected to.
I can see clearly in the code why this is so, but before I elaborate on
that.. Is this intentional?
Thanks
Received on 2008-07-08