Make it possible to set SSL verify mode by stanhu · Pull Request #1085 · redis/hiredis (original) (raw)

I'm not opposed to this in principle, as it does provide quite a bit of convenience.

Presently there's quite a bit of boilerplate involved when you're just testing a TLS connection and you don't want/have peer verification.

That said, if we do add a simple options struct, perhaps we should also incorporate other simple options, such as one that would call SSL_CTX_set_default_verify_paths?

@yossigo let me know if you have any thoughts.