Send client certificate even when ssl_verify_mode is :none #81
Milestone
Comments
Merged
rogerleite
added a commit
that referenced
this issue
Feb 11, 2013
Send client-side certificates (if present) regardless of the state of ssl verify_mode (Fix for issue #81)
|
added a note to the changelog. |
|
thks! |
|
released with version 2.1.0. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In httpi 2.0.0, httpi disables the use of client certificates when
request.auth.ssl.verify_modeis set to:none. This can cause problems when a server requires a client-side certificate but the server itself uses a certificate with "problems" (ie. self-signed or expired). The client should always be able to send a certificate even if the server certificate has problems.It appears the issue is in each of the adapters in HTTPI::Adapter in the
setup_ssl_authmethod. This problem is present in at least the Net::HTTP and Curb (have not tried the others yet).The text was updated successfully, but these errors were encountered: