From 34a695074a3bf98a7322c45f2bca6bbad24fc2ad Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Tue, 28 Nov 2017 17:44:09 +0100
Subject: [PATCH] filter, port alias download uses wrong interpretation of
 checkaliasesurlcert option, by default it doesn't seem to validate certs. we
 should definitely change our config details to enable this....

---
 src/etc/inc/filter.lib.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/etc/inc/filter.lib.inc b/src/etc/inc/filter.lib.inc
index a020e63ec..effec1d33 100644
--- a/src/etc/inc/filter.lib.inc
+++ b/src/etc/inc/filter.lib.inc
@@ -105,7 +105,7 @@ function filter_core_get_url_port_alias($name)
                      $alias_content = file_get_contents($urltable_filename);
                  } else {
                      $arrContextOptions = array();
-                     if (isset($config['system']['checkaliasesurlcert'])) {
+                     if (!isset($config['system']['checkaliasesurlcert'])) {
                          $arrContextOptions['ssl'] = array("verify_peer"=>false,"verify_peer_name"=>false);
                      }
                      foreach ($urls as $url) {