anchor.diff:                end, CACerts).
   
   -spec check_ssl_version() ->
  -      boolean().
  +    boolean().
   check_ssl_version() ->
       case application:get_key(ssl, vsn) of
           {ok, Vsn} ->
  
positive.code: ssl_opts(ssl_verify_enabled, Url) ->
      case check_ssl_version() of
          true ->
              {ok, {_, _, Hostname, _, _, _}} = http_uri:parse(rebar_utils:to_list(Url)),
              VerifyFun = {fun ssl_verify_hostname:verify_fun/3, [{check_hostname, Hostname}]},
              CACerts = certifi:cacerts(),
              [{verify, verify_peer}, {depth, 2}, {cacerts, CACerts}
              ,{partial_chain, fun partial_chain/1}, {verify_fun, VerifyFun}];
          false ->
              ?WARN("Insecure HTTPS request (peer verification disabled), please update to OTP 17.4 or later", []),
              [{verify, verify_none}]
      end.
  
  
negative.code:       ETagPath :: file:name(),
        UpdateETag :: boolean(),
        Res :: download_result().
  cached_download(TmpDir, CachePath, Pkg={pkg, Name, Vsn, _Hash}, Url, ETag,
                  State, ETagPath, UpdateETag) ->
      case request(Url, ETag) of
          {ok, cached} ->
              ?INFO("Version cached at ~ts is up to date, reusing it", [CachePath]),
  