Skip to content

Commit f32f588

Browse files
author
Grok Compression
committed
CurlFetcher: also accept GRK_CURL_ALLOW_INSECURE for SSL bypass
CurlFetcher's auth() only checked GRK_HTTP_UNSAFESSL while S3Fetcher checked GRK_CURL_ALLOW_INSECURE, causing direct HTTPS URLs to fail with SSL errors when only GRK_CURL_ALLOW_INSECURE was set. Now both env vars work in both code paths.
1 parent 72c53fe commit f32f588

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

src/lib/core/stream/fetchers/CurlFetcher.h

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -561,7 +561,9 @@ class CurlFetcher : public IFetcher
561561

562562
virtual void auth(CURL* curl)
563563
{
564-
if(EnvVarManager::test_bool("GRK_HTTP_UNSAFESSL") || auth_.s3_allow_insecure_)
564+
if(EnvVarManager::test_bool("GRK_HTTP_UNSAFESSL") ||
565+
EnvVarManager::test_bool("GRK_CURL_ALLOW_INSECURE") ||
566+
auth_.s3_allow_insecure_)
565567
{
566568
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L);
567569
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L);

0 commit comments

Comments
 (0)