diff options
author | Michael Vogt <michael.vogt@ubuntu.com> | 2011-02-08 10:25:47 +0100 |
---|---|---|
committer | Michael Vogt <michael.vogt@ubuntu.com> | 2011-02-08 10:25:47 +0100 |
commit | 4c6cf49317769725fee34a132c52ec1fe076b8b5 (patch) | |
tree | 1394a74a187ce61982c6c8649721de2f543459a1 /methods/https.cc | |
parent | 931dcf2f960c6a2b117ab3cc847ce51c04e2140c (diff) | |
parent | 3eb9e257855d83d0486d7a5fa7cc5e2edebb6aaa (diff) |
merged from lp:~donkult/apt/sid
Diffstat (limited to 'methods/https.cc')
-rw-r--r-- | methods/https.cc | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/methods/https.cc b/methods/https.cc index aa6786aa8..fc649d6c2 100644 --- a/methods/https.cc +++ b/methods/https.cc @@ -143,13 +143,11 @@ bool HttpsMethod::Fetch(FetchItem *Itm) curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, peer_verify); // ... and hostname against cert CN or subjectAltName - int default_verify = 2; bool verify = _config->FindB("Acquire::https::Verify-Host",true); knob = "Acquire::https::"+remotehost+"::Verify-Host"; verify = _config->FindB(knob.c_str(),verify); - if (!verify) - default_verify = 0; - curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, verify); + int const default_verify = (verify == true) ? 2 : 0; + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, default_verify); // Also enforce issuer of server certificate using its cert string issuercert = _config->Find("Acquire::https::IssuerCert",""); |