beenull/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-09-30 00:31:14 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

LibTLS: Add option to allow self-signed certificates

Browse source 
With this option enabled self-signed certificates will be accepted,
eventhough they cannot be verified.
This commit is contained in:
Michiel Visser 2022-02-23 18:21:21 +01:00 committed by Ali Mohammad Pur
parent 804af863b4
commit 7bc3b193c0
Notes: sideshowbarker 2024-07-17 11:44:49 +09:00 
Author: https://github.com/msvisser
Commit: https://github.com/SerenityOS/serenity/commit/7bc3b193c0
Pull-request: https://github.com/SerenityOS/serenity/pull/12739
Reviewed-by: https://github.com/alimpfard
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Userland/Libraries/LibTLS/TLSv12.cpp
View file

@ -283,7 +283,7 @@ bool Context::verify_chain(StringView host) const
} else {
if (subject_string == issuer_string) {
dbgln("verify_chain: Non-root self-signed certificate");
return false;
return options.allow_self_signed_certificates;
}
if ((cert_index + 1) >= local_chain->size()) {
dbgln("verify_chain: No trusted root certificate found before end of certificate chain");

1
Userland/Libraries/LibTLS/TLSv12.h
View file

@ -252,6 +252,7 @@ struct Options {
OPTION_WITH_DEFAULTS(bool, use_sni, true)
OPTION_WITH_DEFAULTS(bool, use_compression, false)
OPTION_WITH_DEFAULTS(bool, validate_certificates, true)
OPTION_WITH_DEFAULTS(bool, allow_self_signed_certificates, false)
OPTION_WITH_DEFAULTS(Optional<Vector<Certificate>>, root_certificates, )
OPTION_WITH_DEFAULTS(Function<void(AlertDescription)>, alert_handler, [](auto) {})
OPTION_WITH_DEFAULTS(Function<void()>, finish_callback, [] {})