summaryrefslogtreecommitdiffabout
authorMichael Krelin <hacker@klever.net>2007-01-15 00:09:35 (UTC)
committer Michael Krelin <hacker@klever.net>2007-01-15 00:09:35 (UTC)
commit6c7a4fbf0c0e68a500a6b5834a1f3877b160bf77 (patch) (side-by-side diff)
treeba6fa2874ab75f16cd588cc1a0729f6f78b18b93
parent4cfc41760dea44228b590fa9682b19f8a2e38ec2 (diff)
downloadlibopkele-6c7a4fbf0c0e68a500a6b5834a1f3877b160bf77.zip
libopkele-6c7a4fbf0c0e68a500a6b5834a1f3877b160bf77.tar.gz
libopkele-6c7a4fbf0c0e68a500a6b5834a1f3877b160bf77.tar.bz2
--disable-ssl-verify-{host,peer} options added
Diffstat (more/less context) (ignore whitespace changes)
-rw-r--r--configure.ac14
-rw-r--r--lib/consumer.cc6
2 files changed, 20 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac
index fd50721..8397914 100644
--- a/configure.ac
+++ b/configure.ac
@@ -63,2 +63,16 @@ AC_WITH_PCRE([
+curl_ssl_verify_host="true"
+AC_ARG_ENABLE([ssl-verify-host],
+ AC_HELP_STRING([--disable-ssl-verify-host],[disable cURL cert/host relationships verification]),
+ [ test "${enableval}" = "no" && curl_ssl_verify_host="false" ]
+)
+${curl_ssl_verify_host} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYHOST],,[defined if cURL is not to verify cert/host])
+
+curl_ssl_verify_peer="true"
+AC_ARG_ENABLE([ssl-verify-peer],
+ AC_HELP_STRING([--disable-ssl-verify-peer],[disable cURL cert validity verification]),
+ [ test "${enableval}" = "no" && curl_ssl_verify_peer="false" ]
+)
+${curl_ssl_verify_peer} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYPEER],,[defined if cURL is not to verify cert validity])
+
AC_CONFIG_FILES([
diff --git a/lib/consumer.cc b/lib/consumer.cc
index 331b1e9..dc49405 100644
--- a/lib/consumer.cc
+++ b/lib/consumer.cc
@@ -40,2 +40,8 @@ namespace opkele {
|| (r=curl_easy_setopt(c,CURLOPT_TIMEOUT,20))
+#ifdef DISABLE_CURL_SSL_VERIFYHOST
+ || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYHOST,0))
+#endif
+#ifdef DISABLE_CURL_SSL_VERYPEER
+ || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYPEER,0))
+#endif
;