Changeset 9795 in ntrip for trunk/BNC/src/upload/bncuploadcaster.cpp

Timestamp:

Jul 22, 2022, 1:34:16 PM (21 months ago)

Author:

stuerze

Message:

consideration of client SSL certificates, if they are available

File:

• trunk/BNC/src/upload/bncuploadcaster.cpp (modified) (2 diffs)

trunk/BNC/src/upload/bncuploadcaster.cpp

@@ -79 +79 @@
       _secure = true;
       _casterOutPort = 443;
+      // Generate filenames to consider a potential client certificate and private key
+      _crtFileName = settings.value("sslClientCertPath").toString() + _casterOutHost + QString(".%1.crt").arg(_casterOutPort);
+      _keyFileName = settings.value("sslClientCertPath").toString() + _casterOutHost + QString(".%1.key").arg(_casterOutPort);
     }
   }
@@ -215 +218 @@
     _outSocket->ignoreSslErrors();
   } else {
-    _outSocket->setSslConfiguration(BNC_SSL_CONFIG);
+    bncSslConfig sslConfig = BNC_SSL_CONFIG;
+    QFile clientCrtFile(_crtFileName);
+    QFile privateKeyFile(_keyFileName);
+    if ( clientCrtFile.exists() && privateKeyFile.exists()) {
+      // set local certificate
+      clientCrtFile.open(QIODevice::ReadOnly);
+      QSslCertificate clientCrt(&clientCrtFile);
+      sslConfig.setLocalCertificate(clientCrt);
+      // set private key if available
+      privateKeyFile.open(QIODevice::ReadOnly);
+      QSslKey privateKey(&privateKeyFile, QSsl::Rsa);
+      sslConfig.setPrivateKey(privateKey);
+    }
+    _outSocket->setSslConfiguration(sslConfig);
     connect(_outSocket, SIGNAL(sslErrors(QList<QSslError>)), this, SLOT(slotSslErrors(QList<QSslError>)));
   }