kraih/mojo — pull request #351 by scottw (2012-07-10 21:08:55+00:00)
Title: finer SSL_verify_mode control

I have a server whose certificate is new enough that I have to also include the CA file with it:

listen => ['https://*:443?cert=cert.crt&key=key.key&ca=ca.ca-bundle']

However, when I add the 'ca' parameter, this enables client/peer certificate verification, which I don't want to enforce. My commit adds another URL parameter called 'verify' that accepts a SSL_verify_mode hex flag; if no verify parameter is present, the default of 0x03 is used. The new syntax works like this:

listen => ['https://*:443?cert=cert.crt&key=key.key&ca=ca.ca-bundle&verify=0x00']

Thanks for Mojolicious! (even if you don't pull this change)—it has made my life dramatically more fun :)

Scott