swg-source-1.2/src-1.2
1
0
Fork 0
mirror of https://bitbucket.org/theswgsource/src-1.2.git synced 2026-07-14 00:01:30 -04:00
Code Issues Projects Releases Wiki Activity

make cert pinning work (currently only for our 30 year lasting cloudflare cert, can enable others later)

Browse Source
This commit is contained in:
DarthArgus
2017-01-11 07:36:53 +00:00
parent d172725080
commit 0411724f0f
2 changed files with 9 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
external/3rd/library/webAPI/webAPI.cpp
Vendored
+9 -9
View File
@@ -17,9 +17,6 @@
#include "webAPI.h"
#include <openssl/ssl.h>
#include <openssl/bio.h>
using namespace StellaBellum;
webAPI::webAPI(std::string endpoint, std::string userAgent) : uri(endpoint), userAgent(userAgent), statusCode(0) {}
@@ -124,8 +121,8 @@ bool webAPI::fetch(const int &getPost, const int &mimeType) // 0 for json 1 for
res = curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, writeCallback); // place the data into readBuffer using writeCallback
res = curl_easy_setopt(curl, CURLOPT_WRITEDATA, &readBuffer); // specify readBuffer as the container for data
res = curl_easy_setopt(curl, CURLOPT_HTTPHEADER, slist);
switch (getPost) {
switch (getPost) {
case HTTP::GET:
res = curl_easy_setopt(curl, CURLOPT_URL, std::string(uri + "?" + sRequest).c_str());
break;
@@ -137,10 +134,13 @@ bool webAPI::fetch(const int &getPost, const int &mimeType) // 0 for json 1 for
}
if (uri.find("stellabellum") != std::string::npos) {
res = curl_easy_setopt(curl, CURLOPT_SSLCERTTYPE, "PEM");
res = curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 1L);
res = curl_easy_setopt(curl, CURLOPT_SSL_CTX_FUNCTION, *webAPI::sslctx_function);
}
// the public one will verify but since this is pinned we don't care about the CA
res = curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0);
// cloudflare public: ***REMOVED***
// cloudflare private: ***REMOVED***
res = curl_easy_setopt(curl, CURLOPT_PINNEDPUBLICKEY, vxENCRYPT("***REMOVED***").decrypt());
}
if (res == CURLE_OK) {
res = curl_easy_perform(curl); // make the request!