41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
From f96265f5141944e559aae2e6df6c9594b335e9e2 Mon Sep 17 00:00:00 2001
|
|
From: Alad Wenter <alad@archlinux.org>
|
|
Date: Sun, 6 Jan 2019 18:52:09 +0100
|
|
Subject: [PATCH] enable SSL verification by default
|
|
|
|
FS#57747
|
|
---
|
|
doc/man/man5/elinks.conf.5 | 2 +-
|
|
src/network/ssl/ssl.c | 2 +-
|
|
2 files changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/doc/man/man5/elinks.conf.5 b/doc/man/man5/elinks.conf.5
|
|
index f6c54d44..a708e1c7 100644
|
|
--- a/doc/man/man5/elinks.conf.5
|
|
+++ b/doc/man/man5/elinks.conf.5
|
|
@@ -199,7 +199,7 @@ Timeout for non\-restartable connections (in seconds)\&.
|
|
.SS "connection\&.ssl (SSL)"
|
|
SSL options\&.
|
|
.PP
|
|
-connection\&.ssl\&.cert_verify \fB[0|1]\fR (default: 0)
|
|
+connection\&.ssl\&.cert_verify \fB[0|1]\fR (default: 1)
|
|
.RS 4
|
|
Verify the peer\'s SSL certificate\&. Note that this needs extensive configuration of OpenSSL by the user\&.
|
|
.RE
|
|
diff --git a/src/network/ssl/ssl.c b/src/network/ssl/ssl.c
|
|
index 5ed57543..c2683e01 100644
|
|
--- a/src/network/ssl/ssl.c
|
|
+++ b/src/network/ssl/ssl.c
|
|
@@ -114,7 +114,7 @@ done_openssl(struct module *module)
|
|
|
|
static union option_info openssl_options[] = {
|
|
INIT_OPT_BOOL("connection.ssl", N_("Verify certificates"),
|
|
- "cert_verify", 0, 0,
|
|
+ "cert_verify", 0, 1,
|
|
N_("Verify the peer's SSL certificate. Note that this "
|
|
"needs extensive configuration of OpenSSL by the user.")),
|
|
|
|
--
|
|
2.20.1
|
|
|