net::sslglue::lwp(3pm) [debian man page]
Net::SSLGlue::LWP(3pm) User Contributed Perl Documentation Net::SSLGlue::LWP(3pm) NAME
Net::SSLGlue::LWP - proper certificate checking for https in LWP SYNOPSIS
use Net::SSLGlue::LWP SSL_ca_path => ...; use LWP::Simple; get( 'https://www....' ); { local %Net::SSLGlue::LWP::SSLopts = %Net::SSLGlue::LWP::SSLopts; # switch off verification $Net::SSLGlue::LWP::SSLopts{SSL_verify_mode} = 0; # or: set different verification policy, because cert does # not conform to RFC (wildcards in CN are not allowed for https, # but some servers do it anyway) $Net::SSLGlue::LWP::SSLopts{SSL_verifycn_scheme} = { wildcards_in_cn => 'anywhere', check_cn => 'always', }; } DESCRIPTION
Net::SSLGlue::LWP modifies Net::HTTPS and LWP::Protocol::https so that Net::HTTPS is forced to use IO::Socket::SSL instead of Crypt::SSLeay, and that LWP::Protocol::https does proper certificate checking using the "http" SSL_verify_scheme from IO::Socket::SSL. Because LWP does not have a mechanism to forward arbitrary parameters for the construction of the underlying socket these parameters can be set globally when including the package, or with local settings of the %Net::SSLGlue::LWP::SSLopts variable. All of the "SSL_*" parameter from IO::Socket::SSL can be used; the following parameters are especially useful: SSL_ca_path, SSL_ca_file Specifies the path or a file where the CAs used for checking the certificates are located. This is typically "etc/ssl/certs" on UNIX systems. SSL_verify_mode If set to 0, verification of the certificate will be disabled. By default it is set to 1 which means that the peer certificate is checked. SSL_verifycn_name Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you can specify it with this parameter. SEE ALSO
IO::Socket::SSL, LWP, Net::HTTPS, LWP::Protocol::https COPYRIGHT
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself. perl v5.14.2 2011-08-29 Net::SSLGlue::LWP(3pm)
Check Out this Related Man Page
Net::SSLGlue::SMTP(3pm) User Contributed Perl Documentation Net::SSLGlue::SMTP(3pm) NAME
Net::SSLGlue::SMTP - make Net::SMTP able to use SSL SYNOPSIS
use Net::SSLGlue::SMTP; my $smtp_ssl = Net::SMTP->new( $host, SSL => 1, SSL_ca_path => ... ); my $smtp_plain = Net::SMTP->new( $host ); $smtp_plain->starttls( SSL_ca_path => ... ); DESCRIPTION
Net::SSLGlue::SMTP extends Net::SMTP so one can either start directly with SSL or switch later to SSL using the STARTTLS command. By default it will take care to verify the certificate according to the rules for SMTP implemented in IO::Socket::SSL. METHODS
new The method "new" of Net::SMTP is now able to start directly with SSL when the argument "<SSL =" 1>> is given. In this case it will not create an IO::Socket::INET object but an IO::Socket::SSL object. One can give the usual "SSL_*" parameter of IO::Socket::SSL to "Net::SMTP::new". starttls If the connection is not yet SSLified it will issue the STARTTLS command and change the object, so that SSL will now be used. The usual "SSL_*" parameter of IO::Socket::SSL will be given. peer_certificate ... Once the SSL connection is established the object is derived from IO::Socket::SSL so that you can use this method to get information about the certificate. See the IO::Socket::SSL documentation. All of these methods can take the "SSL_*" parameter from IO::Socket::SSL to change the behavior of the SSL connection. The following parameters are especially useful: SSL_ca_path, SSL_ca_file Specifies the path or a file where the CAs used for checking the certificates are located. This is typically "etc/ssl/certs" on UNIX systems. SSL_verify_mode If set to 0, verification of the certificate will be disabled. By default it is set to 1 which means that the peer certificate is checked. SSL_verifycn_name Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you can specify it with this parameter. SEE ALSO
IO::Socket::SSL, Net::SMTP COPYRIGHT
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself. perl v5.14.2 2012-04-06 Net::SSLGlue::SMTP(3pm)