Disable SSL verification to allow downloads from untrusted https locations

2 files changed, 8 insertions, 0 deletions

diff --git a/src/download.c b/src/download.c
index 717f2dc..aa4c61a 100644
--- a/src/download.c
+++ b/src/download.c
@@ -64,6 +64,9 @@ int download_to_buffer(const char* url, char** buf, uint32_t* length)
 	if (idevicerestore_debug)
 		curl_easy_setopt(handle, CURLOPT_VERBOSE, 1);
 
+	/* disable SSL verification to allow download from untrusted https locations */
+	curl_easy_setopt(handle, CURLOPT_SSL_VERIFYPEER, 0);
+
 	curl_easy_setopt(handle, CURLOPT_WRITEFUNCTION, (curl_write_callback)&download_write_buffer_callback);
 	curl_easy_setopt(handle, CURLOPT_WRITEDATA, &response);
 	curl_easy_setopt(handle, CURLOPT_USERAGENT, "InetURL/1.0");
@@ -122,6 +125,9 @@ int download_to_file(const char* url, const char* filename, int enable_progress)
 	if (idevicerestore_debug)
 		curl_easy_setopt(handle, CURLOPT_VERBOSE, 1);
 
+	/* disable SSL verification to allow download from untrusted https locations */
+	curl_easy_setopt(handle, CURLOPT_SSL_VERIFYPEER, 0);
+
 	curl_easy_setopt(handle, CURLOPT_WRITEFUNCTION, NULL);
 	curl_easy_setopt(handle, CURLOPT_WRITEDATA, f);
 
diff --git a/src/tss.c b/src/tss.c
index 2928a2e..8a9dcce 100644
--- a/src/tss.c
+++ b/src/tss.c
@@ -358,7 +358,9 @@ plist_t tss_send_request(plist_t tss_request, const char* server_url_string) {
 		response->content = malloc(1);
 		response->content[0] = '\0';
 
+		/* disable SSL verification to allow download from untrusted https locations */
 		curl_easy_setopt(handle, CURLOPT_SSL_VERIFYPEER, 0);
+
 		curl_easy_setopt(handle, CURLOPT_ERRORBUFFER, curl_error_message);
 		curl_easy_setopt(handle, CURLOPT_WRITEFUNCTION, (curl_write_callback)&tss_write_callback);
 		curl_easy_setopt(handle, CURLOPT_WRITEDATA, response);