]> git.ipfire.org Git - thirdparty/systemd.git/commit
projects / thirdparty / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a9e9288) | patch
journal-upload: also disable VERIFYHOST when --trust=all is used 41626/head
authorLuca Boccassi <luca.boccassi@gmail.com>
Mon, 13 Apr 2026 20:02:10 +0000 (21:02 +0100)
committerLuca Boccassi <luca.boccassi@gmail.com>
Mon, 13 Apr 2026 21:11:50 +0000 (22:11 +0100)
commitf125fc6a22167f3d52c97763e555b2d7d654788e
tree4ae523d3409802a5d5f1e87f495728ca04e2937atree | snapshot
parenta9e9288288567beae57337ae903dd3b6c774001ccommit | diff
journal-upload: also disable VERIFYHOST when --trust=all is used

When --trust=all disables CURLOPT_SSL_VERIFYPEER, the residual
CURLOPT_SSL_VERIFYHOST check is ineffective since an attacker can
present a self-signed certificate with the expected hostname. Disable
both for consistency and log that server certificate verification is
disabled.

Follow-up for 8847551bcbfa8265bae04f567bb1aadc7b480325
src/journal-remote/journal-upload.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.