Hi Danny, Could you post the changes you've made to osg-submissions as a full modified file as copy and pasting simply is not reliable enough. Could you also put together a suggest guide for testing this functionality out so when it comes to me merging changes I can make sure that everything is working correctly.
Thanks, Robert. On Fri, Dec 25, 2009 at 12:02 AM, Danny Lesnik <[email protected]> wrote: > Hi, > > I solved this problem in order to get it working with SSL the following code > should be changed: > > 1) It's needed to fix the following functions for https support: > > Code: > > bool osgDB::containsServerAddress(const std::string& filename) > std::string osgDB::getServerAddress(const std::string& filename) > std::string osgDB::getServerFileName(const std::string& filename) > > > > Currently these functions suport only http requests and the fix there is very > easy. > > 2) There are two ways to handle ssl in curl the "secure" way and the "ugly" > way. > > the "ugly" way means that client will not validate server certificate. This > is less prefered method, but http stream is still encrypted, it means that > every server certificate will be accepted regardless the fact that it's > issued to another machine,domain, etc... > > If decided to go on this derection then the following line should be added in > EasyCurl::EasyCurl() contructor: > > > Code: > > curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYPEER, false); > > > > > If decided to go on "secure" way then end user should download server > certifiace store it in X.509 Certificate (PEM) format in any place on the > machine. > > in EasyCurl::EasyCurl() constructor following code should be added: > > > Code: > > curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYPEER, true); > curl_easy_setopt(_curl, CURLOPT_SSL_VERIFYHOST, 2); > curl_easy_setopt(_curl,l_setopt($ch, CURLOPT_CAINFO, certifiacePath); > > > > > CURLOPT_SSL_VERIFYHOST can be set to the following integer values: > > 0: Don’t check the common name (CN) attribute > 1: Check that the common name attribute at least exists > 2: Check that the common name exists and that it matches the host name of the > server. > > Hope it helps > > Thank you! > > Cheers, > Danny.[/code] > > ------------------ > Read this topic online here: > http://forum.openscenegraph.org/viewtopic.php?p=21870#21870 > > > > > > _______________________________________________ > osg-users mailing list > [email protected] > http://lists.openscenegraph.org/listinfo.cgi/osg-users-openscenegraph.org > _______________________________________________ osg-users mailing list [email protected] http://lists.openscenegraph.org/listinfo.cgi/osg-users-openscenegraph.org
