On Mon, Oct 29, 2012 at 09:43:08PM +0100, Alessandro Ghedini wrote: > Anyway, I just run a quick grep on all the sources of the packages that build > depend on libcurl and those that explicitly set CURLOPT_SSL_VERIFYPEER are > very > few, even less those that set it to 1 (possibily 5-6). This said I still have > to > check those that use php5-curl, pycurl, ... (but there aren't many).
Btw, today the new Debian Code Search service was launched [0] and of course the first search I've done is [1] and then [2]. The interface is not optimal as of now, but at least you don't have to download all the source packages. Also, I've almost finished looking into the suspect Debian packages. I just need to check the last few packages and put the whole data into a nice format. Cheers [0] http://codesearch.debian.net/ [1] http://codesearch.debian.net/search?q=CURLOPT_SSL_VERIFYHOST [2] http://codesearch.debian.net/search?q=CURLOPT_SSL_VERIFYHOST%2C+1 -- perl -E '$_=q;$/= @{[@_]};and s;\S+;<inidehG ordnasselA>;eg;say~~reverse'
signature.asc
Description: Digital signature
------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
