From: Ben Darnell Date: Sat, 19 Feb 2011 22:29:35 +0000 (-0800) Subject: Set both VERIFYPEER and VERIFYHOST according to the validate_cert setting. X-Git-Tag: v1.2.0~9 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dc10fceaab9961e28f380f99240e318ecda7160e;p=thirdparty%2Ftornado.git Set both VERIFYPEER and VERIFYHOST according to the validate_cert setting. --- diff --git a/tornado/httpclient.py b/tornado/httpclient.py index e6c6baa6c..62b2f64a3 100644 --- a/tornado/httpclient.py +++ b/tornado/httpclient.py @@ -568,7 +568,12 @@ def _curl_setup_request(curl, request, buffer, headers): curl.setopt(pycurl.PROXYUSERPWD, credentials) else: curl.setopt(pycurl.PROXY, '') - curl.setopt(pycurl.SSL_VERIFYPEER, request.validate_cert) + if request.validate_cert: + curl.setopt(pycurl.SSL_VERIFYPEER, 1) + curl.setopt(pycurl.SSL_VERIFYHOST, 2) + else: + curl.setopt(pycurl.SSL_VERIFYPEER, 0) + curl.setopt(pycurl.SSL_VERIFYHOST, 0) if request.ca_certs is not None: curl.setopt(pycurl.CAINFO, request.ca_certs) else: