Reputation: 1
I have this c++ code:
curlpp::Cleanup cleaner;
curlpp::Easy request;
std::string requestUrl = "https://some.domain/"
request.setOpt(new curlpp::options::Url(requestUrl));
request.perform();
I want to hardcode an SSLcertificate inside my c++ so that curlpp only trusts this certificate and no other
I donlt want to load the ssl key from a file because an attacker could manipulate the file and add his own cert.
My goal is to prevent man in the middle attacks from a user who has full access to the environment. I know that an attacker could simply reverse engineer my application that's why I want to use encrypted strings and code obfuscation.
i am aware that i cant prevent attackers from reading my applications network traffic but i want it to make as hard as possible. i am also open for other approaches.
Upvotes: 0
Views: 43