mirror of
https://github.com/Unidata/netcdf-c.git
synced 2025-02-11 16:40:36 +08:00
313121a229
re: https://github.com/Unidata/netcdf-c/issues/1684 re: e-support VZL-904142 Two issues: 1. As of libcurl 7.66, the semantics of CURLOPT_SSL_VERIFYHOST changed so that the non-zero values affects certificate processing. 2. The current library was forcing the values of VERIFYPEER and VERIFYHOST to zero instead of leaving them to the default values. Solution was first to leave the defaults in place for VERIFYPEER and VERIFYHOST as long as they are not set in .ocrc/.dodsrc file. Second, the value of HTTP.SSL.VERIFYPEER or HTTP.SSL.VERIFYHOST as set in .ocrc/.dodrc is used to set the corresponding CURLOPT flags. So for example, adding > HTTP.SSL.VERIFYHOST=2 will set the value of CURLOPT_SSL_VERIFYHOST to 2, the default. Using > HTTP.SSL.VERIFYHOST=0 will set the value of CURLOPT_SSL_VERIFYHOST to 0, which disables it. Similarly for VERIFYPEER. Finally the semantics of HTTP.SSL.VALIDATE is now equivalent to > HTTP.SSL.VERIFYPEER=1 > HTTP.SSL.VERIFYHOST=2 |
||
|---|---|---|
| .. | ||
| auth.html.in | ||
| CMakeLists.txt | ||
| dap.y | ||
| daplex.c | ||
| dapparse.c | ||
| dapparselex.h | ||
| dapy.c | ||
| dapy.h | ||
| dodsrc.example | ||
| Makefile.am | ||
| oc.c | ||
| oc.css | ||
| oc.h | ||
| occompile.c | ||
| occompile.h | ||
| occonstraints.h | ||
| occurlflags.c | ||
| occurlfunctions.c | ||
| occurlfunctions.h | ||
| ocdata.c | ||
| ocdata.h | ||
| ocdatatypes.h | ||
| ocdebug.c | ||
| ocdebug.h | ||
| ocdump.c | ||
| ocdump.h | ||
| ochttp.c | ||
| ochttp.h | ||
| ocinternal.c | ||
| ocinternal.h | ||
| ocnode.c | ||
| ocnode.h | ||
| ocread.c | ||
| ocread.h | ||
| ocutil.c | ||
| ocutil.h | ||
| ocx.h | ||
| xxdr.c | ||
| xxdr.h | ||