Add an --insecure / -k option to disable SSL certificate verification

[ghost]

When testing https to a test machine that has a self-signed certificate, it is handy to be able to disable certificate verification.

$ http https://192.168.4.137/test

http: error: SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:547)

vs:

$ curl --insecure https://192.168.4.137/test
... got what I was expecting here ...

[matleh]

You can do http --verify=no https://129.168.4.137/test, at least with the current master branch.

[jkbrzt]

Yes, --verify=no does the trick.

[zeknox]

It would be nice if the the utility also accepted --verify=false

[jkbrzt]

@zeknox that is also accepted:

https://github.com/jakubroztocil/httpie/blob/aae596d4724b39d3ad0da0ef4d6a5e7eb98ae418/httpie/client.py#L230-L235

Does it not work for you?

[zeknox]

@jakubroztocil you're correct, it did work just now 🤷‍♂️