oysteikt/mpd
0
0
Fork 0
Code Issues Pull Requests Releases Activity

input/curl: disable verify_peer on Android by default

Browse Source 
I havn't yet figured out how to use Android's system CA certificates
with CURL/OpenSSL, so a temporary workaround is to disable verify_peer
by default.  The data MPD transfers isn't extremely important, so the
servers's authenticity isn't extremely important either.
This commit is contained in:
Max Kellermann 2021-01-21 14:53:38 +01:00
parent 168d6257b4
commit 74396448df
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/input/plugins/CurlInputPlugin.cxx
View File

@ -369,8 +369,15 @@ input_curl_init(EventLoop &event_loop, const ConfigBlock &block)
proxy_user = block.GetBlockValue("proxy_user"); proxy_user = block.GetBlockValue("proxy_user");
proxy_password = block.GetBlockValue("proxy_password"); proxy_password = block.GetBlockValue("proxy_password");
verify_peer = block.GetBlockValue("verify_peer", true); #ifdef ANDROID
verify_host = block.GetBlockValue("verify_host", true); // TODO: figure out how to use Android's CA certificates and re-enable verify
constexpr bool default_verify = false;
#else
constexpr bool default_verify = true;
#endif
verify_peer = block.GetBlockValue("verify_peer", default_verify);
verify_host = block.GetBlockValue("verify_host", default_verify);
} }
static void static void