security update for dlang-requests

ikod geller.garry at gmail.com
Sat Apr 21 14:48:15 UTC 2018


Hello,

This is just notification about next dlang-requests release, 
where ssl peer verification will be turned on by default(instead 
of 'off'). This can lead to ssl exceptions if you send requests 
to servers with self-signed certificates for example.

How to fix in case of problems:

1) you can turn verification off:

     auto rq = Request();
     rq.sslSetVerifyPeer(false);

2) you can make your certificate "trusted". For example for 
openssl on debian: 
https://unix.stackexchange.com/questions/90450/adding-a-self-signed-certificate-to-the-trusted-list

3) you can call sslSetCaCert to add it for single requests call:

    rq.sslSetCaCert("ca.crt");

Hope this helps, if not - please post bugreports to github 
https://github.com/ikod/dlang-requests


More information about the Digitalmars-d-announce mailing list