From 60ba965e3ad79e6fd5b97317ad00a2107c9d8528 Mon Sep 17 00:00:00 2001
From: Christophe Fergeau <cfergeau@mandriva.com>
Date: Fri, 25 Sep 2009 16:15:51 +0000
Subject: disable certificate checks on media with the right option

---
 pod/urpmi.cfg.5.pod | 7 +++++++
 urpm/download.pm    | 1 +
 2 files changed, 8 insertions(+)

diff --git a/pod/urpmi.cfg.5.pod b/pod/urpmi.cfg.5.pod
index 85630b48..b3c6e60b 100644
--- a/pod/urpmi.cfg.5.pod
+++ b/pod/urpmi.cfg.5.pod
@@ -80,6 +80,13 @@ A comma-separated list of media names. By default, only those media will
 be taken into account (that is, when you don't specify an alternate list
 of media via the B<--media> command-line option.)
 
+=item B<disable-certificate-check>
+
+Disables checking of certificates when connecting to a https medium. By
+default the certificates are checked and the connection will fail if
+the certificate is invalid. This option shouldn't be used for maximum
+security.
+
 =item B<downloader>
 
 Specify which download program to use: B<wget> or B<curl>.
diff --git a/urpm/download.pm b/urpm/download.pm
index 75a8b3d5..87d9f5fd 100644
--- a/urpm/download.pm
+++ b/urpm/download.pm
@@ -855,6 +855,7 @@ sub _all_options {
 	dir => "$urpm->{cachedir}/partial",
 	proxy => get_proxy_($urpm, $medium),
 	metalink => $medium->{mirrorlist},
+	$medium->{disable-certificate-check}?"no-certificate-check":(),
 	$urpm->{debug} ? (debug => $urpm->{debug}) : (),
 	%$options,
     );
-- 
cgit v1.2.1