summaryrefslogtreecommitdiff
path: root/www/p5-LWP-Protocol-https/patches/patch-t_https__proxy.t
blob: 3d1a0e6c6b6b4637ae48ea803309033485681066 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
$NetBSD: patch-t_https__proxy.t,v 1.1 2014/05/15 10:17:38 wiz Exp $

Fix for CVE-2014-3230 from
https://github.com/libwww-perl/lwp-protocol-https/pull/14

--- t/https_proxy.t.orig	2014-04-18 16:21:26.000000000 +0000
+++ t/https_proxy.t
@@ -66,7 +66,10 @@ my %ua;
 $ua{noproxy} = LWP::UserAgent->new(
     keep_alive => 10, # size of connection cache
     # server does not know the expected name and returns generic certificate
-    ssl_opts => { verify_hostname => 0 }
+    ssl_opts => { 
+	verify_hostname => 0, 
+	SSL_ca_file => $cafile,
+    }
 );
 
 $ua{proxy} = LWP::UserAgent->new(