[http,conf] allow user to request no ssl peer verification

This solves for the case where hosted RSS podcasts have self signed or
expired certs:  using default (verify peer) in these instances results
in 'SSL peer certificate or SSH remote key was not OK'
This commit is contained in:
whatdoineed2do/Ray 2021-12-18 16:56:20 +00:00
parent 5efe0eeb0f
commit 8f9356ff11
2 changed files with 5 additions and 0 deletions

View File

@ -69,6 +69,7 @@ static cfg_opt_t sec_general[] =
CFG_INT("db_pragma_synchronous", -1, CFGF_NONE),
CFG_STR("allow_origin", "*", CFGF_NONE),
CFG_STR("user_agent", PACKAGE_NAME "/" PACKAGE_VERSION, CFGF_NONE),
CFG_BOOL("ssl_verifypeer", cfg_true, CFGF_NONE),
CFG_BOOL("timer_test", cfg_false, CFGF_NONE),
CFG_END()
};

View File

@ -102,6 +102,7 @@ http_client_request(struct http_client_ctx *ctx)
struct curl_slist *headers;
struct onekeyval *okv;
const char *user_agent;
long verifypeer;
char header[1024];
long response_code;
@ -116,6 +117,9 @@ http_client_request(struct http_client_ctx *ctx)
curl_easy_setopt(curl, CURLOPT_USERAGENT, user_agent);
curl_easy_setopt(curl, CURLOPT_URL, ctx->url);
verifypeer = cfg_getbool(cfg_getsec(cfg, "general"), "ssl_verifypeer");
curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, verifypeer);
headers = NULL;
if (ctx->output_headers)
{