allow disabling hostname and cert verification separately.

if you're careful, cert only verification can be useful.
always enable both though, to avoid accidentally leaving one off.
ok jsing

1 files changed, 3 insertions, 2 deletions

diff --git a/src/lib/libressl/ressl.h b/src/lib/libressl/ressl.h
index 5d980f1f75..2cad4b4d43 100644
--- a/src/lib/libressl/ressl.h
+++ b/src/lib/libressl/ressl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ressl.h,v 1.17 2014/09/29 15:11:29 jsing Exp $ */
+/* $OpenBSD: ressl.h,v 1.18 2014/10/03 14:14:40 tedu Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -58,7 +58,8 @@ void ressl_config_set_verify_depth(struct ressl_config *config,
     int verify_depth);
 
 void ressl_config_clear_keys(struct ressl_config *config);
-void ressl_config_insecure_no_verify(struct ressl_config *config);
+void ressl_config_insecure_noverifyhost(struct ressl_config *config);
+void ressl_config_insecure_noverifycert(struct ressl_config *config);
 void ressl_config_verify(struct ressl_config *config);
 
 struct ressl *ressl_client(void);