Closed stigtsp closed 2 years ago
On second thoughts; Plack::LWPish doesn't seem to have any usage in other CPAN modules, so don't know how important this PR is in practice...
Plack::LWPish doesn't seem to have any usage in other CPAN modules
Yeah, to be honest I forgot about the existence of this module and definitely have never used it myself :)
HTTP::Tiny doesn't verify TLS/SSL certificates by default. This PR sets that flag for the default user agent so HTTPS certificates are verified like LWP does.
Current (insecure) Plack::LWPish behaviour:
Compared to LWP:
With this fix applied, certificates are checked and the request fails:
Discussions in Debian that motivated this: