cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Possible SSL bug in libcurl 7.32

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Wed, 2 Oct 2013 16:01:28 +0200 (CEST)

On Wed, 2 Oct 2013, SinghLevett, Ishan wrote:

>> + if(!data->set.ssl.verifypeer && !data->set.ssl.verifyhost)
>
> Ah ok, yes I agree that your version of the if statement will produce the
> desired behaviour (as long as servercert() also checks the values of
> "ssl.verifypeer" and "ssl.verifyhost" before it actually performs the
> validation and sets the return code).

I believe it does, yes.

> I've not used git before but can I take it from the fact that you've done a
> diff here that this is something that's already been fixed?

I had a local change, yes and that'w the diff I showed. But now I also
committed it properly and pushed it to the git repo so if you update from git
or just get the next release that change will be included.

Thanks!

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2013-10-02