Add support for overriding the CA directory.

xrootd · Dec 29, 2017 · 9e1b31e · 9e1b31e
1 parent 9563b8b
commit 9e1b31e
Showing 1 changed file with 14 additions and 1 deletion.
diff --git a/src/tpc.cpp b/src/tpc.cpp
@@ -543,7 +543,9 @@ class XrdHttpTPC : public XrdHttpExtHandler {
             fh->close();
             return resp_result;
         }
-
+        if (!m_cadir.empty()) {
+            curl_easy_setopt(curl, CURLOPT_CAPATH, m_cadir.c_str());
+        }
         curl_easy_setopt(curl, CURLOPT_URL, resource.c_str());
 
         XrdHttpTPCState state(std::move(fh), curl, true);
@@ -590,6 +592,9 @@ class XrdHttpTPC : public XrdHttpExtHandler {
             fh->close();
             return resp_result;
         }
+        if (!m_cadir.empty()) {
+            curl_easy_setopt(curl, CURLOPT_CAPATH, m_cadir.c_str());
+        }
         curl_easy_setopt(curl, CURLOPT_URL, resource.c_str());
         XrdHttpTPCState state(std::move(fh), curl, false);
         state.CopyHeaders(req);
@@ -684,6 +689,13 @@ class XrdHttpTPC : public XrdHttpExtHandler {
                     m_log.Emsg("Config", "https.dests value is invalid", val);
                     return false;
                 }
+            } else if (!strcmp("http.cadir", val)) {
+                if (!(val = Config.GetWord())) {
+                    Config.Close();
+                    m_log.Emsg("Config", "http.cadir value not specified");
+                    return false;
+                }
+                m_cadir = val;
             }
         }
         Config.Close();
@@ -733,6 +745,7 @@ class XrdHttpTPC : public XrdHttpExtHandler {
 
     static constexpr int m_marker_period = 5;
     bool m_desthttps{false};
+    std::string m_cadir;
     static std::atomic<uint64_t> m_monid;
     XrdSysError &m_log;
     std::unique_ptr<XrdSfsFileSystem> m_sfs;