puppetlabs/puppet — pull request #3123 by seanknox (2014-09-26 01:08:33+00:00)
Title: Don't allow insecure SSL connections w/curl

The `appdmg` and `pkgdmg` providers were calling `curl` with `-k` which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and many connections will often fail when attempting establish a connection.

This PR removes the insecure option.