diff options
| author | Kamil Dudka <kdudka@redhat.com> | 2011-03-15 14:52:26 +0100 |
|---|---|---|
| committer | Kamil Dudka <kdudka@redhat.com> | 2011-03-15 15:48:24 +0100 |
| commit | 806dbb022b8a595405a740131a30fa0cf4523645 (patch) | |
| tree | 2e8b7c861c078903d57acb67c1d08c33b73920fe /RELEASE-NOTES | |
| parent | 5a433a033ffc8b489a8edc14c4505d0c47a63df6 (diff) | |
nss: do not ignore value of CURLOPT_SSL_VERIFYPEER
When NSS-powered libcurl connected to a SSL server with
CURLOPT_SSL_VERIFYPEER equal to zero, NSS remembered that the peer
certificate was accepted by libcurl and did not ask the second time when
connecting to the same server with CURLOPT_SSL_VERIFYPEER equal to one.
This patch turns off the SSL session cache for the particular SSL socket
if peer verification is disabled. In order to avoid any performance
impact, the peer verification is completely skipped in that case, which
makes it even faster than before.
Bug: https://bugzilla.redhat.com/678580
Diffstat (limited to 'RELEASE-NOTES')
| -rw-r--r-- | RELEASE-NOTES | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 480603f0a..223f5ea11 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -35,6 +35,7 @@ This release includes the following bugfixes: o Fixed detection of recvfrom arguments on Android/bionic o GSS: handle reuse fix o transfer: avoid insane conversion of time_t + o nss: do not ignore value of CURLOPT_SSL_VERIFYPEER in certain cases This release includes the following known bugs: |