trustbridge/trustbridge: ui/sslconnection

annotate ui/sslconnection_curl.cpp @ 999:daa9448b64f5

(issue90) Use certificate pinning and forced ciphersuites for curl

author	Andre Heinecke <andre.heinecke@intevation.de>
date	Mon, 01 Sep 2014 19:49:54 +0200
parents	6a3d284b9c16
children	7dff5c0c569c

rev	line source
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	1 /* Copyright (C) 2014 by Bundesamt für Sicherheit in der Informationstechnik
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	2 * Software engineering by Intevation GmbH
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	3 *
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	4 * This file is Free Software under the GNU GPL (v>=2)
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	5 * and comes with ABSOLUTELY NO WARRANTY!
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	6 * See LICENSE.txt for details.
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	7 */
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	8
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	9 #include "sslconnection_curl.h"
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	10
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	11 #include <polarssl/ssl.h>
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	12 #include <QSaveFile>
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	13
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	14 #define CONNECTION_DEBUG
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	15
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	16 SSLConnectionCurl::SSLConnectionCurl(const QString& url,
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	17 const QByteArray& certificate):
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	18 SSLConnection (url, certificate),
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	19 mCurl (NULL)
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	20 {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	21 curl_global_init(CURL_GLOBAL_DEFAULT);
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	22 mCurl = curl_easy_init();
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	23
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	24 if (!mCurl) {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	25 qDebug() << "Failed to initialize curl";
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	26 return;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	27 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	28
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	29 #ifdef RELEASE_BUILD
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	30 if (curl_easy_setopt(mCurl, CURLOPT_SSL_VERIFYPEER, 1L) != CURLE_OK) {
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	31 #else
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	32 /* For testing we do not have to trust the issuer. This should not
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	33 * be dangerous as we pin the peer certificate directly. */
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	34 if (curl_easy_setopt(mCurl, CURLOPT_SSL_VERIFYPEER, 0L) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	35 #endif
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	36 /* Should be default anyway */
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	37 qDebug() << "Setting verifypeer failed";
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	38 return;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	39 }
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	40
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	41 #ifdef RELEASE_BUILD
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	42 if (curl_easy_setopt(mCurl, CURLOPT_SSL_VERIFYHOST, 1L) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	43 #else
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	44 /* For testing we do not have to trust host. This should not
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	45 * be dangerous as we pin the peer certificate directly. */
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	46 if (curl_easy_setopt(mCurl, CURLOPT_SSL_VERIFYHOST, 0L) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	47 #endif
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	48 /* Should be default anyway */
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	49 qDebug() << "Setting verifypeer failed";
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	50 return;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	51 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	52
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	53 if (curl_easy_setopt(mCurl, CURLOPT_ERRORBUFFER, mErrBuf) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	54 qDebug() << "Setting errorbuf failed";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	55 return;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	56 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	57
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	58 #ifdef RELEASE_BUILD
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	59 if (curl_easy_setopt(mCurl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	60 qDebug() << "Setting ssl version failed.";
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	61 return;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	62 }
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	63 #endif
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	64
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	65 mCertFile.open();
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	66 if (mCertFile.write(mPinnedCert) != mPinnedCert.size()) {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	67 qDebug() << "Failed to write temporary certificate";
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	68 return;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	69 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	70 mCertFile.close();
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	71
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	72 if (curl_easy_setopt(mCurl, CURLOPT_CAINFO,
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	73 mCertFile.fileName().toUtf8().constData()) != CURLE_OK) {
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	74 qDebug() << "Failed to set ca certificate";
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	75 return;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	76 }
991 6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	77
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	78 /* If the build fails here maybe you probably forgot to apply the
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	79 * trustbridge patches to curl */
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	80 if (curl_easy_setopt(mCurl, CURLOPT_PEERCERT,
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	81 mCertFile.fileName().toUtf8().constData()) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	82 qDebug() << "Failed set peer certificate.";
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	83 return;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	84 }
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	85 mInitialized = true;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	86
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	87 #ifdef CONNECTION_DEBUG
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	88 curl_easy_setopt(mCurl, CURLOPT_VERBOSE, 1L);
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	89 #endif
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	90 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	91
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	92 SSLConnectionCurl::~SSLConnectionCurl() {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	93 if (mCurl) {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	94 curl_easy_cleanup (mCurl);
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	95 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	96 if (mInitialized) {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	97 mCertFile.close();
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	98 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	99 curl_global_cleanup();
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	100 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	101
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	102 int SSLConnectionCurl::connect() {
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	103 CURLcode retval;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	104
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	105 if (curl_easy_setopt(mCurl, CURLOPT_URL, mUrl.toEncoded().constData()) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	106 qDebug() << "Failed to set URL";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	107 return -1;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	108 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	109
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	110 if (curl_easy_setopt(mCurl, CURLOPT_CONNECT_ONLY, 1L) != CURLE_OK) {
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	111 qDebug() << "Failed to set connect only option";
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	112 return -1;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	113 }
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	114 retval = curl_easy_perform(mCurl);
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	115 if (retval != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	116 qDebug() << "Failed to connect: " << mErrBuf << " retval: " << retval;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	117 if (retval == CURLE_PEER_FAILED_VERIFICATION) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	118 mErrorState = InvalidCertificate;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	119 return -1;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	120 }
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	121 if (retval == CURLE_SSL_CONNECT_ERROR) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	122 mErrorState = SSLHandshakeFailed;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	123 return -1;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	124 }
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	125
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	126 mErrorState = NoConnection;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	127 return -1;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	128 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	129 mConnected = true;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	130 return 0;
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	131 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	132
991 6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	133 /* Globally do this as we can't pass "this" (the ptr) to the c function */
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	134 size_t ssl_curl_max_write, ssl_curl_written;
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	135
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	136 size_t write_data(void *ptr, size_t size, size_t nmemb,
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	137 QSaveFile *fp)
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	138 {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	139 qDebug() << "Writing size: " << size << " * " << nmemb;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	140 if (ssl_curl_max_write < ssl_curl_written) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	141 qDebug() << "Aborting write. Too much data.";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	142 return 0;
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	143 }
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	144 size_t written = fp->write((const char )ptr, size nmemb);
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	145 if (written != size * nmemb) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	146 qDebug() << "Failed to write data. Written: " << written
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	147 << " requested: " << size * nmemb;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	148 return 0;
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	149 }
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	150 ssl_curl_written += written;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	151 return written;
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	152 }
d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	153
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	154 bool SSLConnectionCurl::downloadFile(const QString &resource,
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	155 const QString &fileName,
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	156 size_t maxSize)
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	157 {
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	158 ssl_curl_written = 0;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	159 ssl_curl_max_write = maxSize;
991 6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	160 QSaveFile outputFile(fileName);
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	161 // Open / Create the file to write to.
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	162 if (!outputFile.open(QIODevice::WriteOnly)) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	163 qDebug() << "Failed to open file";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	164 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	165 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	166 QUrl urlCopy = mUrl;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	167 urlCopy.setPath(resource);
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	168
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	169 if (curl_easy_setopt(mCurl, CURLOPT_URL, urlCopy.toEncoded().constData()) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	170 qDebug() << "Failed to set URL";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	171 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	172 }
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	173
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	174 if (curl_easy_setopt(mCurl, CURLOPT_CONNECT_ONLY, 0L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	175 qDebug() << "Failed to set connect";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	176 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	177 }
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	178
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	179 if (curl_easy_setopt(mCurl, CURLOPT_HEADER, 0L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	180 qDebug() << "Failed to set header";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	181 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	182 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	183
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	184 if (curl_easy_setopt(mCurl, CURLOPT_NOBODY, 0L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	185 qDebug() << "Failed to set no body";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	186 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	187 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	188
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	189 if (curl_easy_setopt(mCurl, CURLOPT_WRITEFUNCTION, write_data) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	190 qDebug() << "Failed to set write function";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	191 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	192 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	193
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	194 if (curl_easy_setopt(mCurl, CURLOPT_WRITEDATA, &outputFile) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	195 qDebug() << "Failed to set write function";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	196 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	197 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	198
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	199 if (curl_easy_perform (mCurl) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	200 qDebug() << "Failed to perform download.";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	201 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	202 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	203
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	204 if (!outputFile.commit()) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	205 qDebug() << "Failed to commit data to filesystem.";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	206 return false;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	207 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	208
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	209 return true;
908 d1c951b3012d Curl based implementation of sslconnection Andre Heinecke <andre.heinecke@intevation.de> parents: diff changeset	210 }
910 eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	211
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	212 QDateTime SSLConnectionCurl::getLastModifiedHeader(const QString &resource) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	213 QUrl urlCopy = mUrl;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	214 urlCopy.setPath(resource);
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	215
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	216 if (curl_easy_setopt(mCurl, CURLOPT_URL, urlCopy.toEncoded().constData()) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	217 qDebug() << "Failed to set URL";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	218 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	219 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	220
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	221 if (curl_easy_setopt(mCurl, CURLOPT_CONNECT_ONLY, 0L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	222 qDebug() << "Failed to set connect";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	223 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	224 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	225
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	226 if (curl_easy_setopt(mCurl, CURLOPT_HEADER, 1L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	227 qDebug() << "Failed to set header";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	228 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	229 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	230
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	231 if (curl_easy_setopt(mCurl, CURLOPT_NOBODY, 1L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	232 qDebug() << "Failed to set no body";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	233 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	234 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	235
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	236 if (curl_easy_setopt(mCurl, CURLOPT_FILETIME, 1L) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	237 qDebug() << "Failed to set filetime";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	238 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	239 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	240
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	241 if (curl_easy_perform (mCurl) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	242 qDebug() << "Failed to perform last modified check.";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	243 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	244 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	245 long filetime = 0;
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	246
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	247 if (curl_easy_getinfo (mCurl, CURLINFO_FILETIME, &filetime) != CURLE_OK) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	248 qDebug() << "Failed to get filetime";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	249 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	250 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	251
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	252 if (filetime == -1) {
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	253 qDebug() << "Invalid Time";
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	254 return QDateTime();
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	255 }
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	256 return QDateTime::fromTime_t(filetime);
eaed02defe6a More SSLConnection refactoring. Fixes curl downloader. Andre Heinecke <andre.heinecke@intevation.de> parents: 908 diff changeset	257 }
956 879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	258
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	259 void SSLConnectionCurl::setProxy(const QUrl& proxyUrl) {
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	260 if (curl_easy_setopt(mCurl, CURLOPT_PROXY, proxyUrl.toEncoded().constData()) != CURLE_OK) {
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	261 qDebug() << "Failed to set proxy";
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	262 return;
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	263 }
879a634d0a40 (issue41) Add proxy support Andre Heinecke <andre.heinecke@intevation.de> parents: 942 diff changeset	264 }
991 6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	265
6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	266 void SSLConnectionCurl::setCiphersuites(int ciphers[]) {
999 daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	267 QStringList cipher_list;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	268 for (int i = 0; ciphers[i] != 0; i++) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	269 cipher_list << ssl_get_ciphersuite_name(ciphers[i]);
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	270 }
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	271
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	272 if (curl_easy_setopt(mCurl, CURLOPT_SSL_CIPHER_LIST,
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	273 cipher_list.join(":").toLatin1().constData()) != CURLE_OK) {
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	274 qDebug() << "Failed to set cipher list";
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	275 return;
daa9448b64f5 (issue90) Use certificate pinning and forced ciphersuites for curl Andre Heinecke <andre.heinecke@intevation.de> parents: 991 diff changeset	276 }
991 6a3d284b9c16 Delegate certificate loading to base class. Minor cleanups. Andre Heinecke <andre.heinecke@intevation.de> parents: 956 diff changeset	277 }

Mercurial > trustbridge > trustbridge

annotate ui/sslconnection_curl.cpp @ 999:daa9448b64f5