Ardour HTTPS verify that peer isn't lying about the cert

https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYPEER.html https://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYHOST.html
2020-10-30 15:58:04 +01:00
parent f509a7e003
commit c69dde96eb
1 changed files with 4 additions and 0 deletions
--- a/gtk2_ardour/ardour_http.cc
+++ b/gtk2_ardour/ardour_http.cc
@@ -168,6 +168,10 @@ HttpGet::HttpGet (bool p, bool ssl)
 	if (ssl && ca_path) {
 		curl_easy_setopt (_curl, CURLOPT_CAPATH, ca_path);
 	}
+
+	if (ssl && (ca_info || ca_path)) {
+		curl_easy_setopt (_curl, CURLOPT_SSL_VERIFYPEER, 1);
+	}
 }

 HttpGet::~HttpGet ()