Net::HTTPS(3pm) User Contributed Perl Documentation Net::HTTPS(3pm)NAME
Net::HTTPS - Low-level HTTP over SSL/TLS connection (client)
DESCRIPTION
The "Net::HTTPS" is a low-level HTTP over SSL/TLS client. The interface is the same as the interface for "Net::HTTP", but the constructor
method take additional parameters as accepted by IO::Socket::SSL. The "Net::HTTPS" object isa "IO::Socket::SSL" too, which make it inherit
additional methods from that base class.
For historical reasons this module also supports using "Net::SSL" (from the Crypt-SSLeay distribution) as its SSL driver and base class.
This base is automatically selected if available and "IO::Socket::SSL" isn't. You might also force which implementation to use by setting
$Net::HTTPS::SSL_SOCKET_CLASS before loading this module. If not set this variable is initialized from the
"PERL_NET_HTTPS_SSL_SOCKET_CLASS" environment variable.
ENVIRONMENT
You might set the "PERL_NET_HTTPS_SSL_SOCKET_CLASS" environment variable to the name of the base SSL implementation (and Net::HTTPS base
class) to use. The default is "IO::Socket::SSL". Currently the only other supported value is "Net::SSL".
SEE ALSO
Net::HTTP, IO::Socket::SSL
perl v5.14.2 2012-02-15 Net::HTTPS(3pm)
Check Out this Related Man Page
Net::SSLGlue::LWP(3pm) User Contributed Perl Documentation Net::SSLGlue::LWP(3pm)NAME
Net::SSLGlue::LWP - proper certificate checking for https in LWP
SYNOPSIS
use Net::SSLGlue::LWP SSL_ca_path => ...;
use LWP::Simple;
get( 'https://www....' );
{
local %Net::SSLGlue::LWP::SSLopts = %Net::SSLGlue::LWP::SSLopts;
# switch off verification
$Net::SSLGlue::LWP::SSLopts{SSL_verify_mode} = 0;
# or: set different verification policy, because cert does
# not conform to RFC (wildcards in CN are not allowed for https,
# but some servers do it anyway)
$Net::SSLGlue::LWP::SSLopts{SSL_verifycn_scheme} = {
wildcards_in_cn => 'anywhere',
check_cn => 'always',
};
}
DESCRIPTION
Net::SSLGlue::LWP modifies Net::HTTPS and LWP::Protocol::https so that Net::HTTPS is forced to use IO::Socket::SSL instead of
Crypt::SSLeay, and that LWP::Protocol::https does proper certificate checking using the "http" SSL_verify_scheme from IO::Socket::SSL.
Because LWP does not have a mechanism to forward arbitrary parameters for the construction of the underlying socket these parameters can be
set globally when including the package, or with local settings of the %Net::SSLGlue::LWP::SSLopts variable.
All of the "SSL_*" parameter from IO::Socket::SSL can be used; the following parameters are especially useful:
SSL_ca_path, SSL_ca_file
Specifies the path or a file where the CAs used for checking the certificates are located. This is typically "etc/ssl/certs" on UNIX
systems.
SSL_verify_mode
If set to 0, verification of the certificate will be disabled. By default it is set to 1 which means that the peer certificate is
checked.
SSL_verifycn_name
Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the
certificate against another name you can specify it with this parameter.
SEE ALSO
IO::Socket::SSL, LWP, Net::HTTPS, LWP::Protocol::https
COPYRIGHT
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed
and/or modified under the same terms as Perl itself.
perl v5.14.2 2011-08-29 Net::SSLGlue::LWP(3pm)