jesse icon indicating copy to clipboard operation
jesse copied to clipboard

pass verify_none to httpc:request

Open mikpe opened this issue 1 year ago • 2 comments

The ssl changes in OTP-26 mean that any code that doesn't specify verify_none will default to verify_peer, and unless certs are passed in you get hard errors. This also affects httpc:request. Update uses of the latter to explicitly pass in verify_none.

mikpe avatar Feb 28 '24 08:02 mikpe

I wonder how hard would it be to make it configurable (eg, via application env)?

Probably not very, but I haven't looked since my goal was to preserve existing (pre OTP-26) behaviour.

mikpe avatar Feb 28 '24 09:02 mikpe

Ping - can someone merge this?

mikpe avatar Mar 05 '24 19:03 mikpe

Background here

Thank you @mikpe. Landed in version 1.7.13

andreineculau avatar Jul 26 '24 15:07 andreineculau