Subject: | Connecting to Self-signed SSL Servers |
Date: | Mon, 26 May 2014 00:10:51 +0530 |
To: | bug-Net-Nessus-XMLRPC [...] rt.cpan.org |
From: | Rajesh Deo <rajesh.deo [...] gmail.com> |
Hi,
This report is not a bug report but a small suggestion for improvement.
Due to a backward incompatible change in lwp-protocol-https on Debian
unstable my nessus scripts were failing (took some time to figure that
out), you can find more discussions around this issue here:
https://github.com/libwww-perl/lwp-protocol-https/pull/14
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=748740
below I am including a patch that introduces a single option to the object
constructor for setting appropriate IO::Socket::SSL LWP options so
connections to self-signed SSL servers do not fail. This also avoids having
to set any environment variable for LWP and is more user-friendly.
This still needs a fix in lwp-protocol-https but when that gets sorted out,
Net::Nessus::XMLRPC part should be fine.
Hope this is useful.
Best Regards,
Rajesh
Message body is not shown because sender requested not to inline it.