diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-11-13 17:42:07 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2013-01-23 14:26:42 -0500 |
| commit | 91f4af7e6af53e1c6bf17ed36cb2161863eddae4 (patch) | |
| tree | 6db06a94df1c57a1287fafbb9c88ff4abaaf3f50 /ipa-client | |
| parent | a40285c5a0288669b72f9d991508d4405885bffc (diff) | |
| download | freeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.tar.gz freeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.tar.xz freeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.zip | |
Do SSL CA verification and hostname validation.
Diffstat (limited to 'ipa-client')
| -rw-r--r-- | ipa-client/ipa-join.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipa-client/ipa-join.c b/ipa-client/ipa-join.c index 64b4c0ac6..8369e360f 100644 --- a/ipa-client/ipa-join.c +++ b/ipa-client/ipa-join.c @@ -166,8 +166,8 @@ callRPC(char * user_agent, memset(curlXportParmsP, 0, sizeof(*curlXportParmsP)); /* Have curl do SSL certificate validation */ - curlXportParmsP->no_ssl_verifypeer = 1; - curlXportParmsP->no_ssl_verifyhost = 1; + curlXportParmsP->no_ssl_verifypeer = 0; + curlXportParmsP->no_ssl_verifyhost = 0; curlXportParmsP->cainfo = "/etc/ipa/ca.crt"; curlXportParmsP->user_agent = user_agent; /* Enable GSSAPI credentials delegation */ |