Commit dcfb10fb authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

Patrick Bihan-Faou's verifyhost addition

parent 0553ab81

include/curl/curl.h

+5 −0
Original line number Diff line number Diff line
@@ -448,6 +448,11 @@ typedef enum { 
   */

  CINIT(HTTPGET, LONG, 80),



  /* Set if we should verify the Common name from the peer certificate in ssl

   * handshake, set 1 to check existence, 2 to ensure that it matches the

   * provided hostname. */

  CINIT(SSL_VERIFYHOST, LONG, 81),

  

  CURLOPT_LASTENTRY /* the last unusued */

} CURLoption;

src/main.c

+3 −0
Original line number Diff line number Diff line
@@ -1881,7 +1881,10 @@ operate(struct Configurable *config, int argc, char *argv[]) 
        /* available from libcurl 7.5: */

        curl_easy_setopt(curl, CURLOPT_CAINFO, config->cacert);

        curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, TRUE);

        curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 2);

      }

      else

        curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 1);

      

      if(config->conf&(CONF_NOBODY|CONF_USEREMOTETIME)) {

        /* no body or use remote time */