Commit83565d7

committed

Peer verification using environment variables

1 parentb28c807 commit83565d7Copy full SHA for 83565d7

File tree

+10

-2

lines changed

boost/network/protocol/http/client
- connection
  - ssl_delegate.ipp
- options.hpp

+10

-2

lines changed

Lines changed: 5 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -34,8 +34,11 @@ void boost::network::http::impl::ssl_delegate::connect(`
`34`	`34`	`context_->load_verify_file(*certificate_filename_);`
`35`	`35`	`if (verify_path_) context_->add_verify_path(*verify_path_);`
`36`	`36`	`}else {`
`37`		`-if (always_verify_peer_)`
`38`		`- context_->set_verify_mode(asio::ssl::context::verify_peer);`
	`37`	`+if ( always_verify_peer_ )`
	`38`	`+ {`
	`39`	`+ context_->set_verify_mode( asio::ssl::context::verify_peer );`
	`40`	`+ context_->set_default_verify_paths();// use openssl default verify paths. uses openssl environment variables SSL_CERT_DIR, SSL_CERT_FILE`
	`41`	`+ }`
`39`	`42`	`else`
`40`	`43`	`context_->set_verify_mode(asio::ssl::context::verify_none);`
`41`	`44`	`}`

Lines changed: 5 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -95,6 +95,11 @@ struct client_options {`
`95`	`95`	`return *this;`
`96`	`96`	`}`
`97`	`97`
	`98`	`+ client_options&always_verify_peer(bool v) {`
	`99`	`+ always_verify_peer_ = v;`
	`100`	`+return *this;`
	`101`	`+ }`
	`102`	`+`
`98`	`103`	`client_options&timeout(int v) {`
`99`	`104`	`timeout_ = v;`
`100`	`105`	`return *this;`

Comments

(0)