edbrowse-dev - development list for edbrowse
 help / color / mirror / Atom feed
From: Chris Brannon <chris@the-brannons.com>
To: Edbrowse-dev@lists.the-brannons.com
Subject: Re: [Edbrowse-dev] Debian
Date: Tue, 23 Sep 2014 07:56:19 -0700	[thread overview]
Message-ID: <8761ge8jxo.fsf@mushroom.PK5001Z> (raw)
In-Reply-To: <20140923121559.GA12972@toaster.adamthompson.me.uk> (Adam Thompson's message of "Tue, 23 Sep 2014 13:15:59 +0100")

Adam Thompson <arthompson1990@gmail.com> writes:

> Sorry for the late post (think I've missed the cut off),
> but I just found that I'm unable to disable ssl certificate verification with
> edbrowse when built on my work debian sid system.

Well, you missed the cutoff, but so did I.  If you think you can figure
out what is going on, I'm more than willing to hold off until we know
more.

I have a suspicion.  There's a second option related to SSL certificate
verification that is always set to true.  It is CURLOPT_VERIFYHOST.
CURLOPT_VERIFYPEER checks to see that the certificate is signed by a
recognized certificate authority.  CURLOPT_VERIFYHOST checks that the
hostname given in the certificate is the same as the hostname that you
are connecting to.  And these are separate checks.  For our purposes,
they probably don't need to be.  So the open question is whether
CURLOPT_VERIFYHOST should always match CURLOPT_VERIFYPEER?

-- Chris

as 

  reply	other threads:[~2014-09-23 14:56 UTC|newest]

Thread overview: 23+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-09-21 21:19 Karl Dahlke
2014-09-22  5:53 ` Chris Brannon
2014-09-23 12:15   ` Adam Thompson
2014-09-23 14:56     ` Chris Brannon [this message]
  -- strict thread matches above, loose matches on Subject: below --
2014-09-24  7:13 Karl Dahlke
2014-09-23 16:42 Karl Dahlke
2014-09-23 20:32 ` Adam Thompson
2014-09-24  4:54 ` Chris Brannon
2014-09-24 18:54   ` Adam Thompson
     [not found] <mailman.8.1411327181.400.edbrowse-dev@lists.the-brannons.com>
2014-09-21 21:17 ` Chris Brannon
2014-09-21 21:20   ` MENGUAL Jean-Philippe
2014-09-23 12:23     ` Adam Thompson
2014-09-23 22:29       ` MENGUAL Jean-Philippe
2014-09-25 15:30       ` Chris Brannon
2014-09-25 17:23         ` MENGUAL Jean-Philippe
2014-03-08 20:40 [Edbrowse-dev] debian Karl Dahlke
2014-03-08 20:45 ` MENGUAL Jean-Philippe
2014-04-01 11:20   ` Adam Thompson
2014-04-01 16:24     ` MENGUAL Jean-Philippe
2014-04-15  9:02       ` Adam Thompson
2014-01-04 20:03 Karl Dahlke
2014-01-04 17:28 Karl Dahlke
2014-01-04 18:18 ` Chris Brannon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=8761ge8jxo.fsf@mushroom.PK5001Z \
    --to=chris@the-brannons.com \
    --cc=Edbrowse-dev@lists.the-brannons.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).