From: Daniel Stenberg <daniel@haxx.se>
Date: Thu, 21 Feb 2008 19:04:11 GMT
Subject: Re: GIT_SSL_NO_VERIFY=1 over http doesn't ignore a different ip address for the signed certificate
Message-ID: <Pine.LNX.4.64.0802212003140.14691@yvahk3.pbagnpgbe.fr>
In-Reply-To: <e26d18e40802211057o255246f3p31800c73eb8391ec@mail.gmail.com>

On Thu, 21 Feb 2008, Anatoly Yakovenko wrote:

> yep, it tells me that the certificate is rejected because it was signed for 
> a different ip then the one i am connected too.  while this is a security 
> threat, browsers will let you ignore it, so i expect that libcurl or git 
> should be able to ignore that error as well.

libcurl can most certainly be told to ignore that:

http://curl.haxx.se/libcurl/c/curl_easy_setopt.html#CURLOPTSSLVERIFYHOST