From c9b5a5ea3a2a485a71fdf176026d5bc7bbf78a31 Mon Sep 17 00:00:00 2001 From: Raquel Medina Date: Mon, 18 Feb 2019 16:33:25 +0200 Subject: binding: identity: disable endpoint certificate checks agl-graphapi.forgerocklabs.org's certificate expired on Friday, October 26, 2018; disable certificate checks to allow for user profile data retrieval. Original work from Scott Murray . Bug-AGL: SPEC-2158 Change-Id: Idebc7d2afa6ad7b40550bc19b4012ea8b277d126 Signed-off-by: Raquel Medina Signed-off-by: Scott Murray (cherry picked from commit 7a98942f2275aef1a704d25f063cc14436ef4f15) --- src/aia-get.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/aia-get.c') diff --git a/src/aia-get.c b/src/aia-get.c index 4536e25..8def6ad 100644 --- a/src/aia-get.c +++ b/src/aia-get.c @@ -60,6 +60,12 @@ static void perform_query(struct keyrequest *kr) if (!curl) kr->callback(kr->closure, 0, "out of memory", 0); else { + /* + * FIXME: forgerock's certificate expired on October 26, 2018. + * Disable certificate checks until it gets renewed. + */ + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0); + oidc_add_bearer(curl, kr->token); curl_wrap_do(curl, perform_query_callback, kr); } -- cgit 1.2.3-korg