wt/cpp-httplib
1
0 Fork 0
mirror of https://github.com/yhirose/cpp-httplib.git synced 2026-10-30 13:00:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix TLS cert verification bypass on proxy redirect introduced in #2165 (#2396)

Browse Source
This commit is contained in:
yhirose authored and GitHub committed 2026-03-12 21:54:51 -04:00
1 parent 9ced2f614d
commit 125272f34b
1 file changed
+4 -12
Download Patch File Download Diff File Expand all files Collapse all files
httplib.h
+4 -12
View File
@@ -12763,18 +12763,10 @@ inline bool ClientImpl::create_redirect_client(
// Setup basic client configuration first // Setup basic client configuration first
setup_redirect_client(redirect_client); setup_redirect_client(redirect_client);
// SSL-specific configuration for proxy environments redirect_client.enable_server_certificate_verification(
if (!proxy_host_.empty() && proxy_port_ != -1) { server_certificate_verification_);
// Critical: Disable SSL verification for proxy environments redirect_client.enable_server_hostname_verification(
redirect_client.enable_server_certificate_verification(false); server_hostname_verification_);
redirect_client.enable_server_hostname_verification(false);
} else {
// For direct SSL connections, copy SSL verification settings
redirect_client.enable_server_certificate_verification(
server_certificate_verification_);
redirect_client.enable_server_hostname_verification(
server_hostname_verification_);
}
// Transfer CA certificate to redirect client // Transfer CA certificate to redirect client
if (!ca_cert_pem_.empty()) { if (!ca_cert_pem_.empty()) {