On Fri, Mar 25, 2011 at 11:34 PM, Benjamin Weibel <[email protected]> wrote:
> Hi all,
>
> first I want to thank you for the great work you did writing this
> library! It really helps me a lot!

You're welcome. :)

> I have been working on integrating openssl and writing an own
> minimalistic dummy-HTTP-client when I discovered this awesome projekt
> just in time.
>
> I work on a cross-platform library and that library has to communicate
> with one specific HTTPS server.
> To authenticate the server, we receive (in advance) an X509-certificate
> to build into our software.
>
> I would like to ask you if it is possible to load one or more specific
> CA-certificates for a HTTPS client connection (doesn't matter if from
> file or from memory).
>
> I've already had a look at the source code and saw that the method
> "https_sync_connection" takes a string-argument "certificate_filename",
> but I saw no way to pass such a filename at the high-level-api.
> Is this parameter solely used to load system-default CA-certificates?
> If not, could you please explain to me how I can load a certificate from
> file or memory?
>

Oops, that filename should actually be a list of filenames; also there
should be a way in the server's constructor to pass the parameter
properly into the connection objects. That has still yet to be done,
but can actually be patched easily.

I was in the middle of adding support for this when I moved my focus
to the server side of the HTTP implementation. At any rate I'll see
whether I can make that happen as soon as I get a better development
machine than the one I have right now.

> Thank you very much in advance and good luck with this project!
>

Thank you for the feedback too -- I'll look at adding this capability
from the client constructor to allow for adding a range of filenames
or even just areas in memory that point to the contents of the
certificates.

If you can, please file an issue over at
https://github.com/cpp-netlib/cpp-netlib/issues so that I can keep
track of this feature.

> Greetings from Switzerland,
>

Greetings from the Philippines!

Thanks Benjamin!

-- 
Dean Michael Berris
http://about.me/deanberris

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Cpp-netlib-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cpp-netlib-devel

Reply via email to