[Scummvm-devel] Cloud integration now works on Switch!

[Matan Bareket]

There's no problem supplying a copy of the CA cert as part of the package,
that's pretty common practice for cross platform applications. Thats the
simplest solution

On Sun, Oct 13, 2019 at 4:11 PM Alexander Tkachov <alexander at tkachov.ru>
wrote:

> Hi,
>
> We had the same problem on Android (still unfixed I believe), so you might
> as well fix that on Android then.
>
> But even though it does work, I doubt that's a proper fix, because you
> basically disabled certificate verification.
>
> I see two ways to "proper fix" that:
>
>    1. Put certificates file somewhere on user's device and pass the path
>    to it via CURLOPT_CAINFO option. We can use latest Mozilla's CA that is
>    published here: https://curl.haxx.se/ca/cacert.pem
>    The "put a file on device" part isn't cool, but we can work with that.
>    Might be also turned into feature, because user would be able to replace it
>    with their own certificates, or into vulnerability, if hackers replace it
>    with theirs (hackers also would need to control cloud.scummvm.org or
>    something, so I'd say it's not probable).
>    2. Build libcurl with non-OpenSSL backend, so it would have native
>    cert check (see https://curl.haxx.se/docs/ssl-compared.html).
>    That's an ideal option, but the problem is that you'd need to port
>    GnuTLS or something to Android/Switch/whatever and that seems to be hell of
>    a tough thing to do.
>
>
>
> Maybe we can have this fix for now, but really intend to "proper fix" it
> in the nearest future. Not that users really care about certificate
> verification, but that is kinda the right way to do it.
>
> — Alexander
>
>
>
> 14.10.2019, 02:43, "rsn8887" <raist66676 at gmx.de>:
>
> Hello all,
> I fixed cloud integration on the Nintendo Switch today. It now works as
> intended.
>
> I committed the fix to master branch and cherry-picked it to branch-2-1.
>
> FWIW, I am voting for a 2.1.1 release. This is a pretty big improvement
> IMO, albeit limited to this one platform.
>
> Cheers,
> rsn8887
> --
> rsn8887 raist66676 at gmx.de
> Patreon: https://www.patreon.com/rsn8887
> Twitter: https://twitter.com/rsn8887
> Github: https://github.com/rsn8887
> Podcast: https://retrotalk.coolatoms.org
> ,
>
> _______________________________________________
> Scummvm-devel mailing list
> Scummvm-devel at lists.scummvm.org
> https://lists.scummvm.org/listinfo/scummvm-devel
>
> _______________________________________________
> Scummvm-devel mailing list
> Scummvm-devel at lists.scummvm.org
> https://lists.scummvm.org/listinfo/scummvm-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.scummvm.org/pipermail/scummvm-devel/attachments/20191013/b6db3ac0/attachment.htm>