CurlMultiConnection should verify SSL host and peer by default

elastic · Jan 13, 2015 · 8c22a82 · 8c22a82
1 parent 0a064c7
commit 8c22a82
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Elasticsearch/Connections/CurlMultiConnection.php b/src/Elasticsearch/Connections/CurlMultiConnection.php
@@ -429,8 +429,8 @@ private function generateCurlOpts($connectionParams)
             CURLOPT_TIMEOUT_MS     => 1000,
             CURLOPT_CONNECTTIMEOUT_MS => 1000,
             CURLOPT_HEADER         => false,
-            CURLOPT_SSL_VERIFYPEER => false,
-            CURLOPT_SSL_VERIFYHOST => false,
+            CURLOPT_SSL_VERIFYPEER => true,
+            CURLOPT_SSL_VERIFYHOST => 2,
             CURLOPT_TCP_NODELAY    => false
         );