-
Notifications
You must be signed in to change notification settings - Fork 373
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: [client] when cert path is empty, set default cert path #381
feat: [client] when cert path is empty, set default cert path #381
Conversation
Code Coverage Report
|
Codecov ReportPatch coverage has no change and project coverage change:
❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more. Additional details and impacted files@@ Coverage Diff @@
## master #381 +/- ##
==========================================
- Coverage 63.19% 62.88% -0.31%
==========================================
Files 207 207
Lines 12388 12403 +15
==========================================
- Hits 7828 7800 -28
- Misses 4560 4603 +43
☔ View full report in Codecov by Sentry. |
@@ -252,6 +252,10 @@ class coro_http_client { | |||
return false; | |||
} | |||
|
|||
if (base_path.empty() && cert_file.empty()) { | |||
ssl_ctx_->set_default_verify_paths(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why we need to call this set_default_verify_paths()?
what the meaning of set_default_verify_paths?
is there any problem?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
details in https://gitlab.com/eidheim/Simple-WebSocket-Server/-/blame/master/client_wss.hpp#L51.
when user not have cert file, let they use openssl default cert.set_default_verify_paths will tell context search cert file in openssl default path.
problem is: When user call init_ssl("", xxx);
will no cert file load?should let program load openssl default cert file.
when no real-world cert file let openssl use it's default.