Jira (PUP-3346) curl allows --insecure SSL connections

[Sean Knox (JIRA)]

Title: Message Title

Sean Knox created an issue   Puppet / PUP-3346 curl allows --insecure SSL connections Issue Type: Bug Affects Versions: 3.7.1 Assignee: Kylo Ginsberg Components: Types and Providers Created: 25/Sep/14 6:26 PM Priority: Normal Reporter: Sean Knox The `appdmg` and `pkgdmg` providers were calling `curl` with `-k` which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and many connections will often fail when attempting establish a connection. Add Comment   This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.