Re: Issue with cert checking
[email protected] Wed, 11 Aug 2010 15:20:05 -0700 (PDT)
| Newsgroups | gmane.comp.lang.perl.modules.lwp |
|---|---|
| Message-ID | <alpine.LRH.1.00.1008111504450.10702@pyramidlake.greatamerica.corp.yahoo.com> |
On Wed, 11 Aug 2010, Guillaume Rousse wrote: > The sample code at > http://stackoverflow.com/questions/74358/how-can-i-get-lwp-to-validate-ssl-server-certificates, > using an actual apache web server, works fine, so I guess the problem > probably comes from my testing setup. Sorry to toot the same horn without providing a solution, but can someone on this list give an authoritative answer to the more generic question of how to make sure LWP::UserAgent verifies the server's SSL cert? The posts at the stackoverflow link above seem to indicate that it might not work, depending on which SSL module is installed (Crypt::, Net::, what-have-you)? Can someone post package requirements & code to guarantee that the script performs all the SSL checks a browser runs (host name check, root cert check, etc.), given that libwww version X and SSL module Y are installed, regardless of what else is installed on the machine? Thanks for any help ... -- Mike Mike Schilli [email protected]