httpclient does not support https

[mearsy]

When using httpclient on the Yun a url

http://api.thingspeak.com/update?apikey=XXXX etc etc

works correctly, except of course the url is sent in plaintext including the apikey. I want to be able to use https which I think is fairly common for web communications

the command

https://api.thingspeak.com/update?apikey=XXXX etc etc

Does nothing at all

[ffissore]

Problem is with curl: it's unable to verify ssl certificate because it misses the issuer ones. Httpclient should add "-k" parameter by default

[matthijskooijman]

Isn't the solution here to add a sane list of default CA's for curl to use? If you want to add -k (alias --insecure) to don't do certificate verification, you should not make this the default, since this will give users a false sense of security...

[ffissore]

Agree. Unfortunately, there is no such package for openwrt (at least I haven't found one).
And if one was available we couldn't install it by default due to disk space limitations.
One option is to manually put cacert.pem (from http://curl.haxx.se/docs/caextract.html) somewhere on the Yun and use the --cacert param as explained here http://curl.haxx.se/docs/sslcerts.html

[matthijskooijman]

Ok, that makese sense. So I think that means that:

• Users should get some kind of useful error message when using https without CA certificate installed
• The Arduino docs should point users at how to install CA certificates themselves

I'm not sure if I like that curl.haxx.se page though. They're offering a bundle of trusted CA certificates without using HTTPS themselves, which seems rather prone to security problems...

[cmaglie]

Fixed by #2084