]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: httpclient: set verify none on the https server
authorWilliam Lallemand <wlallemand@haproxy.org>
Tue, 24 Aug 2021 15:15:58 +0000 (17:15 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 24 Aug 2021 15:15:58 +0000 (17:15 +0200)
There is currently no way to specify the CA to verify from the
httpclient API. Sets the verify to none so we can still do https
request.

src/http_client.c

index 478a3da07fe1b4efa1b14787fb54da81a37686c5..7c0ac08366c5448e999f8d23a79f653eb6f1ee57 100644 (file)
@@ -707,6 +707,8 @@ static int httpclient_init()
        if (!httpclient_srv_ssl->id)
                goto err;
 
+       httpclient_srv_ssl->ssl_ctx.verify = SSL_SOCK_VERIFY_NONE;
+
        /* add the proxy in the proxy list only if everything successed */
        httpclient_proxy->next = proxies_list;
        proxies_list = httpclient_proxy;