Hi all,
I'm trying to find a way to enable me to tell libcurl "Hey, I know this
FTPS server is using a bad certificate, but its OK! I recognize its public
key, so please go ahead and connect to it." In other words, I would like to
have a say when libcurl is validating a certificate without turning off
certificate validation completely. See example below.
My main motivation is that I'm writing a windows program that downloads
files from an FTPS server and I don't want to modify the machines
certificate stores so that the server's cert is trusted. Does libcurl have
a callback or an option that allows to specify my own custom server cert
validation?
Something like this (none of this is real):
static bool my_func(char * tServerCertPEM, size_t size)
{
bool bIsValid = false;
// Do my own checking
bIsValid = CustomCheck(tServerCertPEM, size);
if (!bIsValid)
{
// Fallback to the default libcurl cert validation
bIsValid = curl_super_dupper_easy_validate_cert(tServerCertPEM, size);
}
return bIsValid;
}
int main()
{
.
.
curl_easy_setopt(curl, CURLOPT_SSL_CERTVALIDATOR, my_func);
.
.
}
Thanks!
-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
