From: Antonio Ospite <ao2@ao2.it>
Date: Wed, 3 Jun 2020 20:15:49 +0000 (+0200)
Subject: src/Tweeper.php: do not disable CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER
X-Git-Tag: v1.4.2~9
X-Git-Url: https://git.ao2.it/tweeper.git/commitdiff_plain/78888e26716cad65e8e9df11226384f5661cf657?hp=78888e26716cad65e8e9df11226384f5661cf657

src/Tweeper.php: do not disable CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER

Do not disable CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER to
actually enforce certificate verification on TLS connections.

This was a relic of some early experimental code and should have not
made it to the stable release.

Moreover the value passed to CURLOPT_SSL_VERIFYHOST was also of the
wrong type, it should have been an integer rather than a boolean.
---