| -rw-r--r-- | configure.ac | 14 | ||||
| -rw-r--r-- | lib/consumer.cc | 6 |
2 files changed, 20 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index fd50721..8397914 100644 --- a/configure.ac +++ b/configure.ac @@ -58,12 +58,26 @@ AC_WITH_PCRE([ ]) ],[ AC_MSG_ERROR([no pcre library found. get one at http://www.pcre.org/]) ] ) +curl_ssl_verify_host="true" +AC_ARG_ENABLE([ssl-verify-host], + AC_HELP_STRING([--disable-ssl-verify-host],[disable cURL cert/host relationships verification]), + [ test "${enableval}" = "no" && curl_ssl_verify_host="false" ] +) +${curl_ssl_verify_host} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYHOST],,[defined if cURL is not to verify cert/host]) + +curl_ssl_verify_peer="true" +AC_ARG_ENABLE([ssl-verify-peer], + AC_HELP_STRING([--disable-ssl-verify-peer],[disable cURL cert validity verification]), + [ test "${enableval}" = "no" && curl_ssl_verify_peer="false" ] +) +${curl_ssl_verify_peer} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYPEER],,[defined if cURL is not to verify cert validity]) + AC_CONFIG_FILES([ Makefile libopkele.pc Doxyfile include/Makefile lib/Makefile diff --git a/lib/consumer.cc b/lib/consumer.cc index 331b1e9..dc49405 100644 --- a/lib/consumer.cc +++ b/lib/consumer.cc @@ -35,12 +35,18 @@ namespace opkele { (r=curl_easy_setopt(c,CURLOPT_FOLLOWLOCATION,1)) || (r=curl_easy_setopt(c,CURLOPT_MAXREDIRS,5)) || (r=curl_easy_setopt(c,CURLOPT_DNS_CACHE_TIMEOUT,120)) || (r=curl_easy_setopt(c,CURLOPT_DNS_USE_GLOBAL_CACHE,1)) || (r=curl_easy_setopt(c,CURLOPT_USERAGENT,PACKAGE_NAME"/"PACKAGE_VERSION)) || (r=curl_easy_setopt(c,CURLOPT_TIMEOUT,20)) +#ifdef DISABLE_CURL_SSL_VERIFYHOST + || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYHOST,0)) +#endif +#ifdef DISABLE_CURL_SSL_VERYPEER + || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYPEER,0)) +#endif ; return r; } static size_t _curl_tostring(void *ptr,size_t size,size_t nmemb,void *stream) { string *str = (string*)stream; |