[sword-devel] MiTM

Jaak Ristioja jaak at ristioja.ee
Sun Sep 18 08:20:50 MST 2016


Hi!

In src/mgr/curlhttpt.cpp:

    /* Disable checking host certificate */
    curl_easy_setopt(session, CURLOPT_SSL_VERIFYPEER, false);

Why? Afaik this allows the use of self-signed certificates for MiTM.

Best regards,
J



More information about the sword-devel mailing list