Differences From Artifact [09e56d0f97]:

• File src/http_ssl.c — part of check-in [0a5d0e191c] at 2021-07-08 17:43:03 on branch trunk — Enhancement to codecheck1.c to verify that routines like db_set() use a string literal as the setting argument, and are thus impervious to injection attacks. (user: drh size: 18790) [more...]

To Artifact [1b352f7ae0]:

• File src/http_ssl.c — part of check-in [edd280c3b6] at 2021-08-20 22:41:28 on branch trunk — After prompting to save an SSL cert verification, ensure that the config db is opened to avoid a fatal error when saving. See forum posts [forum:c53d1915a4e0a051|c53d1915a4e0a051] and [forum:4dcd2f16c289848c|4dcd2f16c289848c]. (user: stephan size: 18819)

395
396
397
398
399
400
401

402
403
404
405
406
407
408

        ssl_close();
        return 1;
      }
      ssl_one_time_exception(pUrlData, zHash);
      prompt_user("remember this exception (y/N)? ", &ans);
      cReply = blob_str(&ans)[0];
      if( cReply=='y' || cReply=='Y') {

        ssl_remember_certificate_exception(pUrlData, zHash);
      }
      blob_reset(&ans);
    }
  }

  /* Set the Global.zIpAddr variable to the server we are talking to.

>

395
396
397
398
399
400
401
402
403
404
405
406
407
408
409

        ssl_close();
        return 1;
      }
      ssl_one_time_exception(pUrlData, zHash);
      prompt_user("remember this exception (y/N)? ", &ans);
      cReply = blob_str(&ans)[0];
      if( cReply=='y' || cReply=='Y') {
        db_open_config(0,0);
        ssl_remember_certificate_exception(pUrlData, zHash);
      }
      blob_reset(&ans);
    }
  }

  /* Set the Global.zIpAddr variable to the server we are talking to.