AndreDVJ
|
1d6875a1e9
|
libcurl: Add CA bundle support
CA bundle source from: https://curl.haxx.se/docs/caextract.html
May be useful to someone. Test case I found worked (Didn't ask to specify a ca-bundle or use -k switch for insecure). Firmware size increases ~250KB.
Tried to follow AsusWRT/RMerlin's code. File name was kept the same as source.
root@R7000:/tmp/home/root# /usr/sbin/curl -vvI https://gnupg.org
* (303) (OUT), TLS Unknown, Certificate Status (22):
* (303) (OUT), TLS handshake, Client hello (1):
* (303) (IN), TLS handshake, Server hello (2):
* (303) (IN), TLS handshake, Certificate (11):
* (303) (IN), TLS handshake, Server key exchange (12):
* (303) (IN), TLS handshake, Server finished (14):
* (303) (OUT), TLS handshake, Client key exchange (16):
* (303) (OUT), TLS change cipher, Client hello (1):
* (303) (OUT), TLS handshake, Finished (20):
* (303) (IN), TLS change cipher, Client hello (1):
* (303) (IN), TLS handshake, Finished (20):
> HEAD / HTTP/1.1
> Host: gnupg.org
> User-Agent: curl/7.50.0
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Wed, 27 Jul 2016 13:37:22 GMT
Date: Wed, 27 Jul 2016 13:37:22 GMT
< Strict-Transport-Security: max-age=31536000
Strict-Transport-Security: max-age=31536000
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Connection: Keep-Alive
Connection: Keep-Alive
< Keep-Alive: timeout=10, max=1000
Keep-Alive: timeout=10, max=1000
< Content-Length: 13556
Content-Length: 13556
< Last-Modified: Wed, 27 Jul 2016 10:36:01 GMT
Last-Modified: Wed, 27 Jul 2016 10:36:01 GMT
< Content-Type: text/html
Content-Type: text/html
<
|
9 years ago |