summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2016-11-12 12:53:45 +0100
committerLudovic Courtès <ludo@gnu.org>2016-11-12 13:04:45 +0100
commit17cff9c66214be38de8ece0ce98f707823e25bf2 (patch)
tree9aaef5f8c83c88a3317cbc13f8401529a1fe0c59
parenteda2ad5cd1c40e5dd4b8972111e47265c8fc1db3 (diff)
downloadgnu-guix-17cff9c66214be38de8ece0ce98f707823e25bf2.tar
gnu-guix-17cff9c66214be38de8ece0ce98f707823e25bf2.tar.gz
http-client: Add #:verify-certificate? to 'http-fetch'.
* guix/http-client.scm (http-fetch): Add #:verify-certificate? parameter and pass it to 'open-connection-for-uri'.
-rw-r--r--guix/http-client.scm8
1 files changed, 6 insertions, 2 deletions
diff --git a/guix/http-client.scm b/guix/http-client.scm
index a8324be09f..cc3acc9587 100644
--- a/guix/http-client.scm
+++ b/guix/http-client.scm
@@ -223,7 +223,7 @@ or if EOF is reached."
'shutdown (const #f))
(define* (http-fetch uri #:key port (text? #f) (buffered? #t)
- keep-alive?)
+ keep-alive? (verify-certificate? #t))
"Return an input port containing the data at URI, and the expected number of
bytes available or #f. If TEXT? is true, the data at URI is considered to be
textual. Follow any HTTP redirection. When BUFFERED? is #f, return an
@@ -231,11 +231,15 @@ unbuffered port, suitable for use in `filtered-port'. When KEEP-ALIVE? is
true, send a 'Connection: keep-alive' HTTP header, in which case PORT may be
reused for future HTTP requests.
+When VERIFY-CERTIFICATE? is true, verify HTTPS server certificates.
+
Raise an '&http-get-error' condition if downloading fails."
(let loop ((uri (if (string? uri)
(string->uri uri)
uri)))
- (let ((port (or port (open-connection-for-uri uri)))
+ (let ((port (or port (open-connection-for-uri uri
+ #:verify-certificate?
+ verify-certificate?)))
(auth-header (match (uri-userinfo uri)
((? string? str)
(list (cons 'Authorization