[cpp-sp] branch main updated: Add a guard for unset CA list with https hub URL.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository cpp-sp.

View the commit online:
https://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=51bc3ece11b137da45227993dfdb20902197b2aa

The following commit(s) were added to refs/heads/main by this push:
     new 51bc3ece Add a guard for unset CA list with https hub URL.
51bc3ece is described below

commit 51bc3ece11b137da45227993dfdb20902197b2aa
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Nov 3 09:06:46 2025 -0500

    Add a guard for unset CA list with https hub URL.
---
 shibsp/remoting/impl/AbstractHTTPRemotingService.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/shibsp/remoting/impl/AbstractHTTPRemotingService.cpp b/shibsp/remoting/impl/AbstractHTTPRemotingService.cpp
index 030dd6c7..cbd74aae 100644
--- a/shibsp/remoting/impl/AbstractHTTPRemotingService.cpp
+++ b/shibsp/remoting/impl/AbstractHTTPRemotingService.cpp
@@ -30,6 +30,8 @@
 #include <sys/stat.h>
 
 #include <stdexcept>
+
+#include <boost/algorithm/string.hpp>
 #include <boost/property_tree/ptree.hpp>
 
 using namespace shibsp;
@@ -93,6 +95,9 @@ AbstractHTTPRemotingService::AbstractHTTPRemotingService(ptree& pt)
             throw ConfigurationException(string("CA file is empty: ") + m_caFile);
         }
     }
+    else if (boost::starts_with(m_baseURL, "https://")) {
+        throw ConfigurationException("No tlsCAFile provided for https:// baseURL.");
+    }
 
     m_authCachingCookie = props.getString(AUTH_CACHING_COOKIE_PROP_NAME, AUTH_CACHING_COOKIE_PROP_DEFAULT);
     if (!m_authCachingCookie.empty()) {

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.