Changeset 88124 in vbox

Timestamp:

Mar 15, 2021 5:46:52 PM (4 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

143269

Message:

OCI/PCA: bugref:9969 - Make it possible to specify the CA file for the
REST API calls. If "cert_bundle" profile parameter is not empty, use it.

Location:

trunk

Files:

• include/iprt/cpp/restclient.h (modified) (2 diffs)
• src/VBox/Runtime/common/rest/RTCRestClientApiBase.cpp (modified) (2 diffs)

trunk/include/iprt/cpp/restclient.h

@@ -719 +719 @@
     /** @} */
 
+    /**
+     * Sets the CA file to use for HTTPS.
+     */
+    int setCAFile(const char *pcszCAFile) RT_NOEXCEPT;
+    /** @overload */
+    int setCAFile(const RTCString &strCAFile) RT_NOEXCEPT;
+
     /** Flags to doCall. */
     enum
@@ -731 +738 @@
     /** The server URL to use.  If empty use the default. */
     RTCString m_strServerUrl;
+    /** The CA file to use.  If empty use the default. */
+    RTCString m_strCAFile;
 
     /* Make non-copyable (RTCNonCopyable causes warnings): */

trunk/src/VBox/Runtime/common/rest/RTCRestClientApiBase.cpp

@@ -63 +63 @@
 
 
+int RTCRestClientApiBase::setCAFile(const char *pcszCAFile) RT_NOEXCEPT
+{
+    return m_strCAFile.assignNoThrow(pcszCAFile);
+}
+
+
+int RTCRestClientApiBase::setCAFile(const RTCString &strCAFile) RT_NOEXCEPT
+{
+    return m_strCAFile.assignNoThrow(strCAFile);
+}
+
+
 const char *RTCRestClientApiBase::getServerUrl(void) const RT_NOEXCEPT
 {
@@ -179 +191 @@
 
     int rc = RTHttpCreate(&m_hHttp);
-    if (RT_FAILURE(rc))
+    if (RT_SUCCESS(rc) && m_strCAFile.isNotEmpty())
+        rc = RTHttpSetCAFile(m_hHttp, m_strCAFile.c_str());
+
+    if (RT_FAILURE(rc) && m_hHttp != NIL_RTHTTP)
+    {
+        RTHttpDestroy(m_hHttp);
         m_hHttp = NIL_RTHTTP;
+    }
     return rc;
 }