From d82708e30e7baeff3405a88fd44c0b7ddf5b76d7 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Wed, 23 Aug 2017 09:51:01 +0200 Subject: curl: warn when --insecure is used --- src/tool_operate.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/tool_operate.c b/src/tool_operate.c index fd9a13921..1b695795c 100644 --- a/src/tool_operate.c +++ b/src/tool_operate.c @@ -1145,6 +1145,8 @@ static CURLcode operate_do(struct GlobalConfig *global, if(config->insecure_ok) { my_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L); my_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L); + warnf(config->global, + "Your SSL connection is INSECURE (due to --insecure)\n"); } else { my_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L); @@ -1154,6 +1156,9 @@ static CURLcode operate_do(struct GlobalConfig *global, if(config->proxy_insecure_ok) { my_setopt(curl, CURLOPT_PROXY_SSL_VERIFYPEER, 0L); my_setopt(curl, CURLOPT_PROXY_SSL_VERIFYHOST, 0L); + warnf(config->global, + "Your proxy SSL connection is now INSECURE " + "(due to --proxy-insecure)\n"); } else { my_setopt(curl, CURLOPT_PROXY_SSL_VERIFYPEER, 1L); -- cgit v1.2.1