IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Do SSL CA verification and hostname validation.

Browse Source
This commit is contained in:
Rob Crittenden
2012-11-13 17:42:07 -05:00
parent a40285c5a0
commit 91f4af7e6a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ipa-client/ipa-join.c
View File

@@ -166,8 +166,8 @@ callRPC(char * user_agent,
memset(curlXportParmsP, 0, sizeof(*curlXportParmsP)); memset(curlXportParmsP, 0, sizeof(*curlXportParmsP));
/* Have curl do SSL certificate validation */ /* Have curl do SSL certificate validation */
curlXportParmsP->no_ssl_verifypeer = 1; curlXportParmsP->no_ssl_verifypeer = 0;
curlXportParmsP->no_ssl_verifyhost = 1; curlXportParmsP->no_ssl_verifyhost = 0;
curlXportParmsP->cainfo = "/etc/ipa/ca.crt"; curlXportParmsP->cainfo = "/etc/ipa/ca.crt";
curlXportParmsP->user_agent = user_agent; curlXportParmsP->user_agent = user_agent;
/* Enable GSSAPI credentials delegation */ /* Enable GSSAPI credentials delegation */