Georg Horn's patch. -k is no longer mutually exclusive with --cacert and

--capath. Using -k together with one of those just means that the result
of the CA cert check is ignored (but displayed if -v is used).

diff --git a/src/main.c b/src/main.c
index cd9b5f03f634916a2ac0d7d68ce38790b3fc0893..06fc8dff0d29d50a36231cf1156cc1c14bd56dfd 100644 (file)
--- a/src/main.c
+++ b/src/main.c
@@ -3158,12 +3158,11 @@ operate(struct Configurable *config, int argc, char *argv[])
             curl_easy_setopt(curl, CURLOPT_CAPATH, config->capath);
           curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, TRUE);
         }
-        else
-          if(config->insecure_ok) {
-            /* new stuff needed for libcurl 7.10 */
-            curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE);
-            curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 1);
-          }
+        if(config->insecure_ok) {
+          /* new stuff needed for libcurl 7.10 */
+          curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE);
+          curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 1);
+        }
       
         if((config->conf&CONF_NOBODY) ||
            config->remote_time) {