Experiment: don't set CURLOPT_SSL_VERIFYHOST to 0

See what happens.

Author: stephentoub

src/System.Net.Http/src/System/Net/Http/OSX/CurlHandler.SslProvider.cs

@@ -78,7 +78,7 @@ internal static void SetSslOptions(EasyRequest easy, ClientCertificateOption cli
                     {
                         EventSourceTrace("Disabling peer and host verification per {0}", nameof(HttpClientHandler.DangerousAcceptAnyServerCertificateValidator), easy: easy);
                         easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYPEER, 0); // don't verify the peer
-                        easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYHOST, 0); // don't verify the peer cert's hostname
+                        // TODO: Experimenting with commenting this out: easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYHOST, 0); // don't verify the peer cert's hostname
                     }
                     else
                     {

src/System.Net.Http/src/System/Net/Http/Unix/CurlHandler.SslProvider.cs

@@ -114,7 +114,7 @@ private static void SetSslOptionsForUnsupportedBackend(EasyRequest easy, ClientC
                     {
                         EventSourceTrace("Disabling peer and host verification per {0}", nameof(HttpClientHandler.DangerousAcceptAnyServerCertificateValidator), easy: easy);
                         easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYPEER, 0); // don't verify the peer
-                        easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYHOST, 0); // don't verify the peer's host name
+                        // TODO: Experimenting with commenting this out: easy.SetCurlOption(Interop.Http.CURLoption.CURLOPT_SSL_VERIFYHOST, 0); // don't verify the peer's host name
                     }
                     else
                     {