Hi,

I solved this problem in order to get it working with SSL the following code 
should be changed: 

1) It's needed to fix the following functions for https support:

Code:

bool osgDB::containsServerAddress(const std::string& filename)
std::string osgDB::getServerAddress(const std::string& filename)
std::string osgDB::getServerFileName(const std::string& filename)



Currently these functions suport only http requests and the fix there is very 
easy.

2)  There are two ways to handle ssl in curl the "secure" way and the "ugly" 
way.

the "ugly" way means that client will not validate server certificate. This is 
less prefered method, but http stream is still encrypted, it means that every 
server certificate will be accepted regardless the fact that it's  issued to 
another machine,domain, etc...

If decided to go on this derection then the following line should be added in 
EasyCurl::EasyCurl() contructor:


Code:

curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYPEER, false);




If decided to go on "secure" way then end user should download server 
certifiace store it in  X.509 Certificate (PEM) format in any place on the 
machine.

in  EasyCurl::EasyCurl()  constructor following code should be added:


Code:

curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYPEER, true);
curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYHOST, 2);
curl_easy_setopt(_curl,l_setopt($ch, CURLOPT_CAINFO, certifiacePath);




CURLOPT_SSL_VERIFYHOST can be set to the following integer values:

0: Don’t check the common name (CN) attribute
1: Check that the common name attribute at least exists
2: Check that the common name exists and that it matches the host name of the 
server.

Hope it helps

Thank you!

Cheers,
Danny.[/code]

------------------
Read this topic online here:
http://forum.openscenegraph.org/viewtopic.php?p=21870#21870





_______________________________________________
osg-users mailing list
[email protected]
http://lists.openscenegraph.org/listinfo.cgi/osg-users-openscenegraph.org

Reply via email to