boxen/puppet-boxen — pull request #109 by seanknox (2014-09-25 01:17:20+00:00)
Title: Don't allow insecure SSL connections

The `appdmg_eula` provider was calling `curl` with `-k` which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and one package (boxen/puppet-gpgtools) would often fail when attempting to download an .dmg from their server.

This PR removes the insecure option.