From c69dde96ebcec0d6da3f6d41f5794f56bb388d32 Mon Sep 17 00:00:00 2001
From: Robin Gareus <robin@gareus.org>
Date: Fri, 30 Oct 2020 15:58:04 +0100
Subject: [PATCH] Ardour HTTPS verify that peer isn't lying about the cert

https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYPEER.html
https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYHOST.html
---
 gtk2_ardour/ardour_http.cc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/gtk2_ardour/ardour_http.cc b/gtk2_ardour/ardour_http.cc
index 880d36578e..8d87fd9303 100644
--- a/gtk2_ardour/ardour_http.cc
+++ b/gtk2_ardour/ardour_http.cc
@@ -168,6 +168,10 @@ HttpGet::HttpGet (bool p, bool ssl)
 	if (ssl && ca_path) {
 		curl_easy_setopt (_curl, CURLOPT_CAPATH, ca_path);
 	}
+
+	if (ssl && (ca_info || ca_path)) {
+		curl_easy_setopt (_curl, CURLOPT_SSL_VERIFYPEER, 1);
+	}
 }
 
 HttpGet::~HttpGet ()