2
0
mirror of https://github.com/AxioDL/metaforce.git synced 2025-07-04 15:55:51 +00:00

Disable certificate pinning (for now)

This commit is contained in:
Jack Andersen 2018-02-13 21:50:49 -10:00
parent e766c19e0f
commit 850feb4be8

View File

@ -1,8 +1,10 @@
#include "DownloadManager.hpp" #include "DownloadManager.hpp"
#include "Common.hpp" #include "Common.hpp"
#include <QBuffer>
#include <quazip.h> #include <quazip.h>
#define KEY_PINNING 0
#if KEY_PINNING
static const char AxioDLPublicKeyPEM[] = static const char AxioDLPublicKeyPEM[] =
"-----BEGIN PUBLIC KEY-----\n" "-----BEGIN PUBLIC KEY-----\n"
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtshImzoP1a++9P5RK0k\n" "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtshImzoP1a++9P5RK0k\n"
@ -25,9 +27,11 @@ static const char AxioDLEdgePublicKeyPEM[] =
static const QSslKey AxioDLEdgePublicKey = static const QSslKey AxioDLEdgePublicKey =
QSslKey({AxioDLEdgePublicKeyPEM}, QSsl::Ec, QSsl::Pem, QSsl::PublicKey); QSslKey({AxioDLEdgePublicKeyPEM}, QSsl::Ec, QSsl::Pem, QSsl::PublicKey);
#endif
void DownloadManager::_validateCert(QNetworkReply* reply) void DownloadManager::_validateCert(QNetworkReply* reply)
{ {
#if KEY_PINNING
QSslCertificate peerCert = reply->sslConfiguration().peerCertificate(); QSslCertificate peerCert = reply->sslConfiguration().peerCertificate();
QSslKey peerKey = peerCert.publicKey(); QSslKey peerKey = peerCert.publicKey();
if (peerKey != AxioDLPublicKey && peerKey != AxioDLEdgePublicKey) if (peerKey != AxioDLPublicKey && peerKey != AxioDLEdgePublicKey)
@ -41,6 +45,7 @@ void DownloadManager::_validateCert(QNetworkReply* reply)
QStringLiteral("Certificate pinning mismatch")); QStringLiteral("Certificate pinning mismatch"));
reply->abort(); reply->abort();
} }
#endif
} }
static const QString Domain = QStringLiteral("https://releases.axiodl.com/"); static const QString Domain = QStringLiteral("https://releases.axiodl.com/");