diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-11-13 17:42:07 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-02-13 09:29:19 +0100 |
| commit | 2be643e8dd859dcf4dcc59e607e90fdfdeb7178b (patch) | |
| tree | 64f788725983a0c55073873579e6b69ef66be33c | |
| parent | 47f9052c980994affffbbda0db85d9a172aa9018 (diff) | |
| download | freeipa.git-2be643e8dd859dcf4dcc59e607e90fdfdeb7178b.tar.gz freeipa.git-2be643e8dd859dcf4dcc59e607e90fdfdeb7178b.tar.xz freeipa.git-2be643e8dd859dcf4dcc59e607e90fdfdeb7178b.zip | |
Do SSL CA verification and hostname validation.
| -rw-r--r-- | ipa-client/ipa-join.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipa-client/ipa-join.c b/ipa-client/ipa-join.c index 4c371131..6a9770fe 100644 --- a/ipa-client/ipa-join.c +++ b/ipa-client/ipa-join.c @@ -166,8 +166,8 @@ callRPC(char * user_agent, memset(curlXportParmsP, 0, sizeof(*curlXportParmsP)); /* Have curl do SSL certificate validation */ - curlXportParmsP->no_ssl_verifypeer = 1; - curlXportParmsP->no_ssl_verifyhost = 1; + curlXportParmsP->no_ssl_verifypeer = 0; + curlXportParmsP->no_ssl_verifyhost = 0; curlXportParmsP->cainfo = "/etc/ipa/ca.crt"; curlXportParmsP->user_agent = user_agent; /* Enable GSSAPI credentials delegation */ |