view release on metacpan or  search on metacpan

lib/Armadito/Agent/HTTP/Protocol/https.pm  view on Meta::CPAN

package Armadito::Agent::HTTP::Protocol::https;

use strict;
use warnings;
use base qw(LWP::Protocol::https);

use IO::Socket::SSL qw(SSL_VERIFY_NONE SSL_VERIFY_PEER);

sub import {
	my ( $class, %params ) = @_;

	IO::Socket::SSL::set_ctx_defaults( ca_file => $params{ca_cert_file} )
		if $params{ca_cert_file};
	IO::Socket::SSL::set_ctx_defaults( ca_path => $params{ca_cert_dir} )
		if $params{ca_cert_dir};
}

sub _extra_sock_opts {
	my ( $self, $host ) = @_;

	return (
		SSL_verify_mode => $self->{ua}->{ssl_check} ? SSL_VERIFY_PEER : SSL_VERIFY_NONE,
		SSL_verifycn_scheme => 'http',
		SSL_verifycn_name   => $host
	);
}
1;
__END__

=head1 NAME

Armadito::Agent::HTTP::Protocol::https - HTTPS protocol handler for LWP

=head1 DESCRIPTION

This is an overrided HTTPS protocol handler for LWP, allowing to use
subjectAltNames for checking server certificate.