summaryrefslogtreecommitdiffstats
path: root/ipa-client
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2012-11-13 17:42:07 -0500
committerRob Crittenden <rcritten@redhat.com>2013-01-23 14:26:42 -0500
commit91f4af7e6af53e1c6bf17ed36cb2161863eddae4 (patch)
tree6db06a94df1c57a1287fafbb9c88ff4abaaf3f50 /ipa-client
parenta40285c5a0288669b72f9d991508d4405885bffc (diff)
downloadfreeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.tar.gz
freeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.tar.xz
freeipa-91f4af7e6af53e1c6bf17ed36cb2161863eddae4.zip
Do SSL CA verification and hostname validation.
Diffstat (limited to 'ipa-client')
-rw-r--r--ipa-client/ipa-join.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ipa-client/ipa-join.c b/ipa-client/ipa-join.c
index 64b4c0ac..8369e360 100644
--- a/ipa-client/ipa-join.c
+++ b/ipa-client/ipa-join.c
@@ -166,8 +166,8 @@ callRPC(char * user_agent,
memset(curlXportParmsP, 0, sizeof(*curlXportParmsP));
/* Have curl do SSL certificate validation */
- curlXportParmsP->no_ssl_verifypeer = 1;
- curlXportParmsP->no_ssl_verifyhost = 1;
+ curlXportParmsP->no_ssl_verifypeer = 0;
+ curlXportParmsP->no_ssl_verifyhost = 0;
curlXportParmsP->cainfo = "/etc/ipa/ca.crt";
curlXportParmsP->user_agent = user_agent;
/* Enable GSSAPI credentials delegation */