lua - verify certs when doing HTTPS requests

2021-10-23 10:10:24 +02:00
parent 163af4a49d
commit c00c7f46a0
3 changed files with 3316 additions and 1 deletions
--- a/lua/misc/root-ca.pem
+++ b/lua/misc/root-ca.pem
--- a/lua/recaptcha.lua
+++ b/lua/recaptcha.lua
@@ -27,7 +27,6 @@ end
 function M.check (token, recaptcha_secret)
 	local httpc = http.new()
 	local res, err = httpc:request_uri("https://www.google.com/recaptcha/api/siteverify", {
-		ssl_verify = false,
 		method = "POST",
 		body = "secret=" .. recaptcha_secret .. "&response=" .. token .. "&remoteip=" .. ngx.var.remote_addr,
 		headers = { ["Content-Type"] = "application/x-www-form-urlencoded" }