2021-07-17 Fred Gleason <fredg@paravelsystems.com>

* Disabled host key validation for SFTP transfers in the podcast
	subsystem.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-07-17 09:27:53 -04:00
parent 8289db9f9e
commit 75c04995e7
2 changed files with 13 additions and 4 deletions

View File

@@ -371,6 +371,11 @@ bool Xport::PostRssElemental(RDFeed *feed,const QDateTime &now,QString *err_msg)
//
if((QUrl(feed->feedUrl()).scheme().toLower()=="sftp")&&
(!rda->station()->sshIdentityFile().isEmpty())&&feed->purgeUseIdFile()) {
//
// Disable host key verification
//
curl_easy_setopt(curl,CURLOPT_SSL_VERIFYHOST,0);
curl_easy_setopt(curl,CURLOPT_USERNAME,
feed->purgeUsername().toUtf8().constData());
curl_easy_setopt(curl,CURLOPT_SSH_PRIVATE_KEYFILE,
@@ -381,16 +386,17 @@ bool Xport::PostRssElemental(RDFeed *feed,const QDateTime &now,QString *err_msg)
rda->station()->sshIdentityFile().toUtf8().constData());
}
else {
//
// Disable host key verification
//
curl_easy_setopt(curl,CURLOPT_SSL_VERIFYHOST,0);
curl_easy_setopt(curl,CURLOPT_USERNAME,
feed->purgeUsername().toUtf8().constData());
curl_easy_setopt(curl,CURLOPT_PASSWORD,
feed->purgePassword().toUtf8().constData());
}
// HACK HACK!!
curl_easy_setopt(curl,CURLOPT_SSL_VERIFYHOST,0); // Verify remote hostname
curl_easy_setopt(curl,CURLOPT_SSL_VERIFYPEER,0); // Verify remote certificate
//
// Transfer Parameters
//