Net::SSLGlue::LWP - proper certificate checking for https in LWP
use Net::SSLGlue::LWP SSL_ca_path => ...;
use LWP::Simple;
get( 'https://www....' );
{
local %Net::SSLGlue::LWP::SSLopts = %Net::SSLGlue::LWP::SSLopts;
$Net::SSLGlue::LWP::SSLopts{SSL_verify_mode} = 0; # no verification
}
Net::SSLGlue::LWP modifies Net::HTTPS and LWP::Protocol::https so that Net::HTTPS is forced to use IO::Socket::SSL instead of Crypt::SSLeay and that LWP::Protocol::https does proper certificate checking using the http SSL_verify_scheme from IO::Socket::SSL.
Because LWP does not have a mechanism to forward arbitrary parameter for the construction of the underlying socket these parameters can be set globally when including the package or with local settings of the %Net::SSLGlue::LWP::SSLopts variable.
All of the SSL_* parameter from IO::Socket::SSL can be used, especially the following parameters are useful:
Specifies the path or a file where the CAs used for checking the certificates are located. Typical for UNIX systems is "etc/ssl/certs".
If set to 0 disabled verification of the certificate. By default it is 1 which means, that the peer certificate is checked.
Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you might specify it with this parameter.
IO::Socket::SSL, LWP, Net::HTTPS, LWP::Protocol::https
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.
