LWP::Protocol::https discards 0 value for SSL_VERIFY_mode [rt.cpan.org #111517] about lwp-protocol-https HOT 5 OPEN

@oalders I will look at adding something this week

from lwp-protocol-https.

ping

from lwp-protocol-https.

If this is still an issue then a pull request with tests (if possible) would help move this along.

from lwp-protocol-https.

Ran into this today.

If you set:

     my $ua = LWP::UserAgent->new;
 
     require LWP::Protocol::https;
     $ua->ssl_opts( (
                         SSL_verify_mode => 0,
                         verify_hostname => 1, # The default is 1
                     ));

you run into this issue which makes sense because if you are verifying the hostname so you cannot disable the ssl verification. By default verify_hostname is true so SSL_verify_mode is set by default

the easiest fix for me was to:

     my $ua = LWP::UserAgent->new;
 
     require LWP::Protocol::https;
     $ua->ssl_opts( (
                         SSL_verify_mode => 0, #explicitly disable SSL verification
                         verify_hostname => 0, #explicitly disable hostname verification
                     ));

Unless I am missing something I am not sure that there is a code change required here. Essentially SSL_verify_mode being false also requires verify_hostname to be false.

It is possible that this is a documentation issue. It is also possible that this is not the intended functionality.

from lwp-protocol-https.

@timlegge maybe we should add something similar to libwww-perl/libwww-perl@7aeb7bc to this module?

from lwp-protocol-https.