From 7e08709241cb7f99b2d1dabbad72131dfec8427b Mon Sep 17 00:00:00 2001 From: Tudor Marcu Date: Wed, 2 Nov 2016 13:55:13 -0700 Subject: [PATCH] Remove certificate pinning To enable swupd-client to communicate with a CDN for updates, the custom cert pinning must be removed. Signed-off-by: Tudor Marcu --- src/curl.c | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/src/curl.c b/src/curl.c index fc00450b..59fc41c5 100644 --- a/src/curl.c +++ b/src/curl.c @@ -447,16 +447,6 @@ static CURLcode swupd_curl_set_security_opts(CURL *curl) goto exit; } - curl_ret = curl_easy_setopt(curl, CURLOPT_PINNEDPUBLICKEY, UPDATE_CA_CERTS_PATH "/425b0f6b.key"); - if (curl_ret != CURLE_OK) { - goto exit; - } - - curl_ret = curl_easy_setopt(curl, CURLOPT_CAPATH, UPDATE_CA_CERTS_PATH); - if (curl_ret != CURLE_OK) { - goto exit; - } - #if 0 // TODO: add the below when you know the paths: curl_easy_setopt(curl, CURLOPT_CRLFILE, path-to-cert-revoc-list);