# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1499454286 -7200
# Node ID e92585ab49989053630424941347a2d74ed50467
# Parent  8f82d3cd0631e6ac619ff28776fb3ac3aea92576
net.http: Add option for disabling TLS certifictate validation

diff -r 8f82d3cd0631 -r e92585ab4998 net/http.lua
--- a/net/http.lua	Fri Jul 07 21:04:30 2017 +0200
+++ b/net/http.lua	Fri Jul 07 21:04:46 2017 +0200
@@ -37,7 +37,7 @@
 	local req = requests[conn];
 
 	-- Validate certificate
-	if conn:ssl() then
+	if not req.insecure and conn:ssl() then
 		local sock = conn:socket();
 		local chain_valid = sock.getpeerverification and sock:getpeerverification();
 		if not chain_valid then
@@ -202,6 +202,7 @@
 				headers[k] = v;
 			end
 		end
+		req.insecure = ex.insecure;
 	end
 
 	log("debug", "Making %s %s request '%s' to %s", req.scheme:upper(), method or "GET", req.id, (ex and ex.suppress_url and host_header) or u);