Don't check hostname. This change allows redirecting to another domain

to download the actual package, aligning it with Hex.
erlang · Jul 3, 2023 · 4d57f7a · 4d57f7a
1 parent 1b6297d
commit 4d57f7a
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/apps/rebar/src/rebar_utils.erl b/apps/rebar/src/rebar_utils.erl
@@ -1070,12 +1070,11 @@ get_cacerts() ->
       Enabled :: atom(),
       Url :: string() | binary(),
       Res :: proplists:proplist().
-ssl_opts(ssl_verify_enabled, Url) ->
+ssl_opts(ssl_verify_enabled, _Url) ->
     case check_ssl_version() of
         true ->
-            #{host := Hostname} = rebar_uri:parse(rebar_utils:to_list(Url)),
             VerifyFun = {fun ssl_verify_hostname:verify_fun/3,
-                         [{check_hostname, Hostname}]},
+                         []},
             CACerts = get_cacerts(),
             SslOpts = [{verify, verify_peer}, {depth, 10}, {cacerts, CACerts},
                        {partial_chain, fun partial_chain/1}, {verify_fun, VerifyFun}],