diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2008-11-09 07:36:44 +0000 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2008-11-09 07:36:44 +0000 |
| commit | ce4186b4c3f8d78bcd77fdc93ab1cbe00e2b45e2 (patch) | |
| tree | db9fbe036481a27edc419b2c2e2528e1dfe3ed18 /src/LibsslTLSContext.cc | |
| parent | 79d463fae2e1e3cf87b61bb519de1428f1f2b39c (diff) | |
2008-11-09 Tatsuhiro Tsujikawa <t-tujikawa@users.sourceforge.net>
Added the ability to verify peer in SSL/TLS using given CA
certificates.
The CA certificates are specified in --ca-certificate option.
By default, the verification is disabled. Use --check-certificate
option to enable it.
* src/HttpRequestCommand.cc
* src/LibgnutlsTLSContext.cc
* src/LibgnutlsTLSContext.h
* src/LibsslTLSContext.cc
* src/LibsslTLSContext.h
* src/MultiUrlRequestInfo.cc
* src/OptionHandlerFactory.cc
* src/SocketCore.cc
* src/SocketCore.h
* src/a2functional.h
* src/message.h
* src/option_processing.cc
* src/prefs.cc
* src/prefs.h
* src/usage_text.h
Diffstat (limited to 'src/LibsslTLSContext.cc')
| -rw-r--r-- | src/LibsslTLSContext.cc | 19 |
1 files changed, 18 insertions, 1 deletions
diff --git a/src/LibsslTLSContext.cc b/src/LibsslTLSContext.cc index 22e5f08a..17108c32 100644 --- a/src/LibsslTLSContext.cc +++ b/src/LibsslTLSContext.cc @@ -43,7 +43,9 @@ namespace aria2 { -TLSContext::TLSContext():_sslCtx(0), _logger(LogFactory::getInstance()) +TLSContext::TLSContext():_sslCtx(0), + _peerVerificationEnabled(false), + _logger(LogFactory::getInstance()) { _sslCtx = SSL_CTX_new(SSLv23_client_method()); if(_sslCtx) { @@ -106,4 +108,19 @@ SSL_CTX* TLSContext::getSSLCtx() const return _sslCtx; } +void TLSContext::enablePeerVerification() +{ + _peerVerificationEnabled = true; +} + +void TLSContext::disablePeerVerification() +{ + _peerVerificationEnabled = false; +} + +bool TLSContext::peerVerificationEnabled() const +{ + return _peerVerificationEnabled; +} + } // namespace aria2 |