#776230 libwww-perl: false positive(?) "Client-SSL-Warning: Peer certificate not verified" with keep-alive

Package:
libwww-perl
Source:
libwww-perl
Submitter:
Jakub Wilk
Date:
2015-01-25 18:57:07 UTC
Severity:
normal
#776230#3
Date:
2015-01-25 18:53:24 UTC
From:
To:
When keep-alive is enabled then second (and subsequent) requests to the
same HTTPS host causes "Client-SSL-Warning: Peer certificate not
verified" headers in the response headers. Hopefully this is false
positive: since the requests reused the existing connection, there was
nothing to check.

To reproduce, run the attached test script:

$ perl test_keepalive_https.pl
Client-SSL-Warning: (none)
Client-SSL-Warning: Peer certificate not verified
Client-SSL-Warning: Peer certificate not verified