AxioDL/metaforce
2
0
Fork 0
mirror of https://github.com/AxioDL/metaforce.git synced 2025-07-04 12:35:52 +00:00
Code Issues Projects Releases Wiki Activity

Disable certificate pinning (for now)

Browse Source
This commit is contained in:
Jack Andersen 2018-02-13 21:50:49 -10:00
parent e766c19e0f
commit 850feb4be8
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hecl-gui/DownloadManager.cpp
View File

@ -1,8 +1,10 @@
#include "DownloadManager.hpp"
#include "Common.hpp"
#include <QBuffer>
#include <quazip.h>
#define KEY_PINNING 0
#if KEY_PINNING
static const char AxioDLPublicKeyPEM[] =
"-----BEGIN PUBLIC KEY-----\n"
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtshImzoP1a++9P5RK0k\n"
@ -25,9 +27,11 @@ static const char AxioDLEdgePublicKeyPEM[] =
static const QSslKey AxioDLEdgePublicKey =
QSslKey({AxioDLEdgePublicKeyPEM}, QSsl::Ec, QSsl::Pem, QSsl::PublicKey);
#endif
void DownloadManager::_validateCert(QNetworkReply* reply)
{
#if KEY_PINNING
QSslCertificate peerCert = reply->sslConfiguration().peerCertificate();
QSslKey peerKey = peerCert.publicKey();
if (peerKey != AxioDLPublicKey && peerKey != AxioDLEdgePublicKey)
@ -41,6 +45,7 @@ void DownloadManager::_validateCert(QNetworkReply* reply)
QStringLiteral("Certificate pinning mismatch"));
reply->abort();
}
#endif
}
static const QString Domain = QStringLiteral("https://releases.axiodl.com/");