diff Core/HttpClient.cpp @ 1973:7bd4cb780feb

Option "HttpsVerifyPeers" can be used to connect against self-signed HTTPS certificates
author Sebastien Jodogne <s.jodogne@gmail.com>
date Mon, 11 Apr 2016 15:17:53 +0200
parents b1291df2f780
children 99b249867052
line wrap: on
line diff
--- a/Core/HttpClient.cpp	Mon Apr 11 14:02:18 2016 +0200
+++ b/Core/HttpClient.cpp	Mon Apr 11 15:17:53 2016 +0200
@@ -221,10 +221,12 @@
     if (IsHttpsVerifyPeers())
     {
       CheckCode(curl_easy_setopt(pimpl_->curl_, CURLOPT_CAINFO, GetHttpsCACertificates().c_str()));
+      CheckCode(curl_easy_setopt(pimpl_->curl_, CURLOPT_SSL_VERIFYHOST, 2));  // libcurl default is strict verifyhost
       CheckCode(curl_easy_setopt(pimpl_->curl_, CURLOPT_SSL_VERIFYPEER, 1)); 
     }
     else
     {
+      CheckCode(curl_easy_setopt(pimpl_->curl_, CURLOPT_SSL_VERIFYHOST, 0)); 
       CheckCode(curl_easy_setopt(pimpl_->curl_, CURLOPT_SSL_VERIFYPEER, 0)); 
     }
 #endif