mikeal/request — pull request #300 by isaacs (2012-08-17 15:50:58+00:00)
Title: Specify servername when creating secureSocket over tunneling proxy

This makes the https-over-http proxy work when strictSSL is turned on.

In v0.8.5, we fixed a security bug where an otherwise valid cert would be
accepted for a host that was not listed in the CN or subjectaltnames
sections of the certificate.

However, this breaks proxying, because you want to accept the cert if
it comes from the origin server, not tested against the proxy's
hostname.

This fixes isaacs/npm#2719