aniani/elinks
1
0
Fork 0
mirror of https://github.com/rkd77/elinks.git synced 2025-02-02 15:09:23 -05:00
Code

[ssl,dos] Copied code from links for own bundle of certificates.

Browse Source 
Also filename is the same: links.crt.
So if you do not want alert about ssl errors, copy links.crt from links
to src directory of elinks.
This commit is contained in:
Witold Filipczyk 2022-06-08 16:14:55 +02:00
parent f52c889304
commit 2f16f6aee6
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
src/network/ssl/ssl.c
View File

@ -28,6 +28,7 @@
#include "elinks.h" #include "elinks.h"
#include "intl/libintl.h" #include "intl/libintl.h"
#include "main/main.h"
#include "main/module.h" #include "main/module.h"
#include "network/connection.h" #include "network/connection.h"
#include "network/socket.h" #include "network/socket.h"
@ -86,6 +87,39 @@ socket_SSL_ex_data_dup(CRYPTO_EX_DATA *to, const CRYPTO_EX_DATA *from,
static char opensslversion[64]; static char opensslversion[64];
#ifdef CONFIG_OS_DOS
#define LINKS_CRT_FILE "links.crt"
static int
ssl_set_private_paths(SSL_CTX *ctx)
{
char *path, *c;
int r;
path = stracpy(program.path);
if (!path) {
return -1;
}
for (c = path + strlen((const char *)path); c > path; c--) {
if (dir_sep(c[-1])) {
break;
}
}
c[0] = 0;
add_to_strn(&path, LINKS_CRT_FILE);
r = SSL_CTX_load_verify_locations(ctx, (char *)path, NULL);
mem_free(path);
if (r != 1) {
return -1;
}
return 0;
}
#endif
static void static void
init_openssl(struct module *module) init_openssl(struct module *module)
{ {
@ -118,6 +152,10 @@ init_openssl(struct module *module)
SSLeay_add_ssl_algorithms(); SSLeay_add_ssl_algorithms();
context = SSL_CTX_new(SSLv23_client_method()); context = SSL_CTX_new(SSLv23_client_method());
SSL_CTX_set_options(context, SSL_OP_ALL); SSL_CTX_set_options(context, SSL_OP_ALL);
#ifdef CONFIG_OS_DOS
ssl_set_private_paths(context);
#endif
SSL_CTX_set_default_verify_paths(context); SSL_CTX_set_default_verify_paths(context);
socket_SSL_ex_data_idx = SSL_get_ex_new_index(0, NULL, socket_SSL_ex_data_idx = SSL_get_ex_new_index(0, NULL,
NULL, NULL,