Feature #5207
open
autoconfig: allow NDN-FCH service over HTTPS
Added by Junxiao Shi almost 2 years ago.
Updated 2 months ago.
Description
Currently, ndn-autoconfig can only connect to NDN-FCH service over insecure http:// scheme.
This feature is to reimplement this feature with Boost.Beast HTTP client library so that it allows https:// scheme as well.
It seems that Boost.Beast lacks TLS certificate verification feature.
To properly connect to HTTPS, it's necessary to import djarek/certify submodule.
Junxiao Shi wrote in #note-1:
To properly connect to HTTPS, it's necessary to import djarek/certify submodule.
I'm not too familiar with Asio's SSL/TLS support, can you elaborate on why that's needed and what's the difference with set_default_verify_paths()?
Well, that will have to be tested. On macOS, AFAIK, Homebrew openssl creates a certificate store in the proper path at installation time, and I assume SSL_CTX_set_default_verify_paths will use that path. Windows is not supported, so it's not a concern.
- Target version deleted (
22.12)
- Blocked by Task #5276: Increase build requirements to Boost 1.71.0 added
- Description updated (diff)
Boost.Beast is now available in the minimum Boost version supported by ndn-cxx, so that there's no more conditionals.
Also available in: Atom
PDF
Updated by 
Updated by