Re: Issue with cert checking

[email protected] Wed, 11 Aug 2010 15:20:05 -0700 (PDT)
Newsgroups gmane.comp.lang.perl.modules.lwp
Message-ID <alpine.LRH.1.00.1008111504450.10702@pyramidlake.greatamerica.corp.yahoo.com>
On Wed, 11 Aug 2010, Guillaume Rousse wrote:

> The sample code at
> http://stackoverflow.com/questions/74358/how-can-i-get-lwp-to-validate-ssl-server-certificates,
> using an actual apache web server, works fine, so I guess the problem
> probably comes from my testing setup.

Sorry to toot the same horn without providing a solution, but can
someone on this list give an authoritative answer to the more generic
question of how to make sure LWP::UserAgent verifies the server's SSL
cert?

The posts at the stackoverflow link above seem to indicate that it might
not work, depending on which SSL module is installed (Crypt::, Net::,
what-have-you)?

Can someone post package requirements & code to guarantee that the
script performs all the SSL checks a browser runs (host name check, root
cert check, etc.), given that libwww version X and SSL module Y are
installed, regardless of what else is installed on the machine?

Thanks for any help ...

-- Mike

Mike Schilli
[email protected]