diff options
| author | Michael Vetter <jubalh@iodoru.org> | 2022-03-23 13:02:01 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-03-23 13:02:01 +0100 |
| commit | 2c7f52f81da1664e2ce099614c98dbba61611279 (patch) | |
| tree | 9a78c9780dfd64c177ef382feab1636d7a8fe8e2 /src/tools/http_download.c | |
| parent | 5ea7186c27196340c72a1f83736cca79dd9b692d (diff) | |
| parent | 3a86b8c29b1ccff7383478e980a7edf3aec3979a (diff) | |
| download | profani-tty-2c7f52f81da1664e2ce099614c98dbba61611279.tar.gz | |
Merge pull request #1652 from profanity-im/fix-1624
Fix #1624
Diffstat (limited to 'src/tools/http_download.c')
| -rw-r--r-- | src/tools/http_download.c | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/src/tools/http_download.c b/src/tools/http_download.c index d4df5f6b..57e36e61 100644 --- a/src/tools/http_download.c +++ b/src/tools/http_download.c @@ -50,6 +50,7 @@ #include "profanity.h" #include "event/client_events.h" #include "tools/http_download.h" +#include "config/cafile.h" #include "config/preferences.h" #include "ui/ui.h" #include "ui/window.h" @@ -125,6 +126,10 @@ http_file_get(void* userdata) } char* cert_path = prefs_get_string(PREF_TLS_CERTPATH); + gchar* cafile = cafile_get_name(); + ProfAccount* account = accounts_get_account(session_get_account_name()); + gboolean insecure = strcmp(account->tls_policy, "trust") == 0; + account_free(account); pthread_mutex_unlock(&lock); curl_global_init(CURL_GLOBAL_ALL); @@ -145,9 +150,16 @@ http_file_get(void* userdata) curl_easy_setopt(curl, CURLOPT_USERAGENT, "profanity"); + if (cafile) { + curl_easy_setopt(curl, CURLOPT_CAINFO, cafile); + } if (cert_path) { curl_easy_setopt(curl, CURLOPT_CAPATH, cert_path); } + if (insecure) { + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L); + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L); + } if ((res = curl_easy_perform(curl)) != CURLE_OK) { err = strdup(curl_easy_strerror(res)); @@ -161,6 +173,7 @@ http_file_get(void* userdata) } pthread_mutex_lock(&lock); + g_free(cafile); g_free(cert_path); if (err) { if (download->cancel) { |