| -rw-r--r-- | configure.ac | 14 | ||||
| -rw-r--r-- | lib/consumer.cc | 6 |
2 files changed, 20 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index fd50721..8397914 100644 --- a/configure.ac +++ b/configure.ac @@ -61,6 +61,20 @@ AC_WITH_PCRE([ ] ) +curl_ssl_verify_host="true" +AC_ARG_ENABLE([ssl-verify-host], + AC_HELP_STRING([--disable-ssl-verify-host],[disable cURL cert/host relationships verification]), + [ test "${enableval}" = "no" && curl_ssl_verify_host="false" ] +) +${curl_ssl_verify_host} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYHOST],,[defined if cURL is not to verify cert/host]) + +curl_ssl_verify_peer="true" +AC_ARG_ENABLE([ssl-verify-peer], + AC_HELP_STRING([--disable-ssl-verify-peer],[disable cURL cert validity verification]), + [ test "${enableval}" = "no" && curl_ssl_verify_peer="false" ] +) +${curl_ssl_verify_peer} || AC_DEFINE([DISABLE_CURL_SSL_VERIFYPEER],,[defined if cURL is not to verify cert validity]) + AC_CONFIG_FILES([ Makefile libopkele.pc diff --git a/lib/consumer.cc b/lib/consumer.cc index 331b1e9..dc49405 100644 --- a/lib/consumer.cc +++ b/lib/consumer.cc @@ -38,6 +38,12 @@ namespace opkele { || (r=curl_easy_setopt(c,CURLOPT_DNS_USE_GLOBAL_CACHE,1)) || (r=curl_easy_setopt(c,CURLOPT_USERAGENT,PACKAGE_NAME"/"PACKAGE_VERSION)) || (r=curl_easy_setopt(c,CURLOPT_TIMEOUT,20)) +#ifdef DISABLE_CURL_SSL_VERIFYHOST + || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYHOST,0)) +#endif +#ifdef DISABLE_CURL_SSL_VERYPEER + || (r=curl_easy_setopt(c,CURLOPT_SSL_VERIFYPEER,0)) +#endif ; return r; } |