cf09d38904dd6b0333eb2369d8f84c3ee6478450 galt Tue Nov 23 23:35:32 2021 -0800 Since IP addresses are automatically whitelisted and no cert verify takes place, we no longer need them. Also added a useful option for controlling the hardwired whitelist for hubCheck. diff --git src/lib/https.c src/lib/https.c index b5b8c3c..d787207 100644 --- src/lib/https.c +++ src/lib/https.c @@ -353,32 +353,31 @@ AllocArray(words, wordCount); chopByWhite(dmwl, words, wordCount); int w; for(w=0; w < wordCount; w++) { hashStoreName(domainHash, words[w]); } freeMem(words); } freez(&dmwl); // useful for testing, turns off hardwired whitelist exceptions if (!hashLookup(domainHash, "noHardwiredExceptions")) { // Hardwired exceptions whitelist - hashStoreName(domainHash, "141.80.181.46"); - hashStoreName(domainHash, "54.175.59.127"); + // openssl automatically whitelists domains which are given as IPv4 or IPv6 addresses hashStoreName(domainHash, "annotation.dbi.udel.edu"); hashStoreName(domainHash, "apprisws.bioinfo.cnio.es"); hashStoreName(domainHash, "arn.ugr.es"); hashStoreName(domainHash, "bic2.ibi.upenn.edu"); hashStoreName(domainHash, "bioinfo2.ugr.es"); hashStoreName(domainHash, "bioshare.genomecenter.ucdavis.edu"); hashStoreName(domainHash, "biowebport.com"); hashStoreName(domainHash, "bx.bio.jhu.edu"); hashStoreName(domainHash, "cluster.hpcc.ucr.edu"); hashStoreName(domainHash, "costalab.ukaachen.de"); hashStoreName(domainHash, "data.rc.fas.harvard.edu"); hashStoreName(domainHash, "datahub-7ak6xof0.udes.genap.ca"); hashStoreName(domainHash, "datahub-7mu6z13t.udes.genap.ca"); hashStoreName(domainHash, "datahub-bx3mvzla.udes.genap.ca"); hashStoreName(domainHash, "datahub-gvhsc2p7.udes.genap.ca");