From f96265f5141944e559aae2e6df6c9594b335e9e2 Mon Sep 17 00:00:00 2001
From: Alad Wenter <alad@archlinux.org>
Date: Sun, 6 Jan 2019 18:52:09 +0100
Subject: [PATCH] enable SSL verification by default
FS#57747
---
doc/man/man5/elinks.conf.5 | 2 +-
src/network/ssl/ssl.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/doc/man/man5/elinks.conf.5 b/doc/man/man5/elinks.conf.5
index f6c54d44..a708e1c7 100644
--- a/doc/man/man5/elinks.conf.5
+++ b/doc/man/man5/elinks.conf.5
@@ -199,7 +199,7 @@ Timeout for non\-restartable connections (in seconds)\&.
.SS "connection\&.ssl (SSL)"
SSL options\&.
.PP
-connection\&.ssl\&.cert_verify \fB[0|1]\fR (default: 0)
+connection\&.ssl\&.cert_verify \fB[0|1]\fR (default: 1)
.RS 4
Verify the peer\'s SSL certificate\&. Note that this needs extensive configuration of OpenSSL by the user\&.
.RE
diff --git a/src/network/ssl/ssl.c b/src/network/ssl/ssl.c
index 5ed57543..c2683e01 100644
--- a/src/network/ssl/ssl.c
+++ b/src/network/ssl/ssl.c
@@ -114,7 +114,7 @@ done_openssl(struct module *module)
static union option_info openssl_options[] = {
INIT_OPT_BOOL("connection.ssl", N_("Verify certificates"),
- "cert_verify", 0, 0,
+ "cert_verify", 0, 1,
N_("Verify the peer's SSL certificate. Note that this "
"needs extensive configuration of OpenSSL by the user.")),
--
2.20.1