Changeset 53186 in vbox

Timestamp:

Nov 3, 2014 2:20:34 PM (10 years ago)

Author:

vboxsync

Message:

Main/webservice: better protocol selection

Location:

trunk/src/VBox/Main/webservice

Files:

• vboxweb.cpp (modified) (2 diffs)
• webtest.cpp (modified) (2 diffs)

trunk/src/VBox/Main/webservice/vboxweb.cpp

@@ -6 +6 @@
  *      server, to which clients can connect.
  *
- * Copyright (C) 2007-2013 Oracle Corporation
+ * Copyright (C) 2007-2014 Oracle Corporation
  *
  * This file is part of VirtualBox Open Source Edition (OSE), as
@@ -844 +844 @@
 
 #ifdef WITH_OPENSSL
-    if (g_fSSL && soap_ssl_server_context(&soap, SOAP_SSL_DEFAULT | SOAP_TLSv1, g_pcszKeyFile,
+    if (g_fSSL && soap_ssl_server_context(&soap, SOAP_SSL_REQUIRE_SERVER_AUTHENTICATION | SOAP_TLSv1, g_pcszKeyFile,
                                          g_pcszPassword, g_pcszCACert, g_pcszCAPath,
                                          g_pcszDHFile, g_pcszRandFile, g_pcszSID))

trunk/src/VBox/Main/webservice/webtest.cpp

@@ -4 +4 @@
  *      functionality of VBoxManage for testing purposes.
  *
- * Copyright (C) 2006-2013 Oracle Corporation
+ * Copyright (C) 2006-2014 Oracle Corporation
  *
  * This file is part of VirtualBox Open Source Edition (OSE), as
@@ -113 +113 @@
     // In a real world setup please use at least SOAP_SSL_DEFAULT and provide
     // the necessary CA certificate for validating the server's certificate.
-    if (fSSL && soap_ssl_client_context(&soap, SOAP_SSL_NO_AUTHENTICATION,
+    if (fSSL && soap_ssl_client_context(&soap, SOAP_SSL_NO_AUTHENTICATION | SOAP_TLSv1,
                                         NULL /*clientkey*/, NULL /*password*/,
                                         NULL /*cacert*/, NULL /*capath*/,