clearlinux/swupd-client
2
0
Fork 0
mirror of https://github.com/clearlinux/swupd-client.git synced 2026-10-03 23:38:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove certificate pinning

Browse Source 
To enable swupd-client to communicate with a CDN for updates, the custom
cert pinning must be removed.

Signed-off-by: Tudor Marcu <tudor.marcu@intel.com>
This commit is contained in:
Tudor Marcu
2016-11-14 17:10:32 -08:00
committed by tmarcu
parent 2743e7e8e7
commit 7e08709241
1 changed files with 0 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/curl.c
-10
View File
@@ -447,16 +447,6 @@ static CURLcode swupd_curl_set_security_opts(CURL *curl)
goto exit;
}
curl_ret = curl_easy_setopt(curl, CURLOPT_PINNEDPUBLICKEY, UPDATE_CA_CERTS_PATH "/425b0f6b.key");
if (curl_ret != CURLE_OK) {
goto exit;
}
curl_ret = curl_easy_setopt(curl, CURLOPT_CAPATH, UPDATE_CA_CERTS_PATH);
if (curl_ret != CURLE_OK) {
goto exit;
}
#if 0
// TODO: add the below when you know the paths:
curl_easy_setopt(curl, CURLOPT_CRLFILE, path-to-cert-revoc-list);