Question

I am running a CGI script in C++ using xml-rpc library. The server code is located in /var/www/cgi-bin/ directory to be run by Apache. Apache is also configured to allow permission running the cgi. Now the problem is that since Apache on my system has a self-signed certificate, when I run the client to access this address:
“https://localhost/cgi-bin/xmlrpcserver”

It gives me this error:
Client threw error: Unable to transport XML to server and get XML response back. libcurl failed to execute the HTTP POST transaction, explaining: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

For the time being, how can I bypass checking certificate verification to run and test my application. I want SSL connection (to encrypt the entire communication) while I want to ignore certificate verification and use the current self-sign certificate.

Thanks

Answer 1

Use Complex Client pattern in xmlrpc_c library and set no_ssl_verifyhost and no_ssl_verifypeer options in curl transport true:

#include <string>
#include <iostream>
#include <xmlrpc-c/client.hpp>

int main()
{
  std::string const serverUrl("https://localhost/cgi-bin/xmlrpcserver");
  std::string const methodName("sample.add");

  xmlrpc_c::clientXmlTransport_curl myTransport
    (xmlrpc_c::clientXmlTransport_curl::constrOpt()
     .no_ssl_verifyhost(true)
     .no_ssl_verifypeer(true)
     );
  xmlrpc_c::client_xml myClient(&myTransport);

  xmlrpc_c::paramList sampleAddParms;
  sampleAddParms.add(xmlrpc_c::value_int(5));
  sampleAddParms.add(xmlrpc_c::value_int(7));

  xmlrpc_c::rpcPtr myRpcP(methodName, sampleAddParms);

  xmlrpc_c::carriageParm_curl0 myCarriageParm(serverUrl);
  myRpcP->call(&myClient, &myCarriageParm);

  int const sum((xmlrpc_c::value_int(myRpcP->getResult())));
  std::cout << sum << std::endl;
}