Implement SSL certificates in the iQueryable branch about couchdb-net HOT 7 CLOSED

Sure. Anything specific?

Here's the official docs on how to configure SSL for the CouchDb server. If you use a certificate that passes the default validation (trusted cert, machine name matches, valid dates, etc), everything should just work over SSL. But if you're cert fails the default validation (self-signed cert like in their instructions, machine name doesn't match, expired, etc), HttpClient won't allow the connection. One way around that is configuring Flurl to do custom certificate validation at the app level as mentioned in #4.

FlurlHttp.ConfigureClient(serverUri.ToString(), c =>
{
    c.Settings.HttpClientFactory = new CertClientFactory();
});

public class CustomCertClientFactory : DefaultHttpClientFactory
{
    public override HttpMessageHandler CreateMessageHandler()
    {
        return new HttpClientHandler()
        {
            ServerCertificateCustomValidationCallback = (message, cert, chain, errors) =>
            {
                // TODO Implement actual cert validation
                return true;
            }
        };
    }
}

from couchdb-net.

So, with this code it will always validate the certificate?
Is it safe?

from couchdb-net.

Sorry stupid question, is up to the user use a valid certificate.
Thank you!

from couchdb-net.

Exactly, this code will always accept any cert presented, so it's not safe. As it sits in my above code snippet, the SSL would provide encryption, but not validate that the server is who you expect. It's up to the user to implement cert validation at that TODO to decide whether it will accept the certificate

from couchdb-net.

I'll add a "IgnoreCertificateValidation" and "ConfigureCertificateValidation(func)" so user can decide what to do.

from couchdb-net.

@borigas
The iQueryable should be almost ready for release if you want to test something or if you have any suggestions.

from couchdb-net.

var client = new CouchClient(
    "http://localhost:5984", s => s
        .ConfigureCookieAuthentication("root", "relax")
        .IgnoreCertificateValidation()
   );

from couchdb-net.