Return to the Panopto API index page
If we communicate with the server, we should be checking that it is a valid and secure server.
The following code is taken from the Panopto github: https://github.com/Panopto/ScheduleTool
Add the following name spaces to the top of the application you made in the previous posts
|
1 2 |
using System.Net; using System.Security.Cryptography.X509Certificates; |
Add this to the top of the application, just above static void Main()
|
1 |
static bool hasBeenInitialized = false; |
Then add the following to the bottom of the application. Within class Program but outside of static void Main()
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
/// <summary> /// Ensures that our custom certificate validation has been applied /// </summary> public static void EnsureCertificateValidation() { if (!hasBeenInitialized) { ServicePointManager.ServerCertificateValidationCallback += new System.Net.Security.RemoteCertificateValidationCallback(CustomCertificateValidation); hasBeenInitialized = true; } } /// <summary> /// Ensures that server certificate is authenticated /// </summary> private static bool CustomCertificateValidation(object sender, X509Certificate cert, X509Chain chain, System.Net.Security.SslPolicyErrors error) { return true; } |
With this code you can call
|
1 |
EnsureCertificateValidation(); |
to ensure that the server certificate is valid. We will use this function in all our API calls.
Our full code now looks like this
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 |
using System; using System.Collections.Generic; using System.Linq; using System.Text; using System.Net; using System.Security.Cryptography.X509Certificates; using ConsolePanoptoAPI.PanoptoAccessManagement; using ConsolePanoptoAPI.PanoptoAuth; using ConsolePanoptoAPI.PanoptoRemoteRecorderManagement; using ConsolePanoptoAPI.PanoptoSessionManagement; using ConsolePanoptoAPI.PanoptoUsageReporting; using ConsolePanoptoAPI.PanoptoUserManagement; namespace ConsolePanoptoAPI { class Program { static bool hasBeenInitialized = false; static void Main(string[] args) { PanoptoAuth.AuthenticationInfo sessionAuthInfo = new PanoptoAuth.AuthenticationInfo() { UserKey = "api", Password = "s2ezupajePhasaP5" }; IAuth iAuth = new AuthClient(); Console.WriteLine(iAuth.GetServerVersion()); Console.ReadLine(); } /// <summary> /// Ensures that our custom certificate validation has been applied /// </summary> public static void EnsureCertificateValidation() { if (!hasBeenInitialized) { ServicePointManager.ServerCertificateValidationCallback += new System.Net.Security.RemoteCertificateValidationCallback(CustomCertificateValidation); hasBeenInitialized = true; } } /// <summary> /// Ensures that server certificate is authenticated /// </summary> private static bool CustomCertificateValidation(object sender, X509Certificate cert, X509Chain chain, System.Net.Security.SslPolicyErrors error) { return true; } } } |
Return to the Panopto API index page
I see you don’t monetize your site, don’t waste your traffic, you can earn additional bucks every month because
you’ve got hi quality content. If you want to know how to make
extra $$$, search for: Mrdalekjd methods for $$$
This code doesn’t ensure the server’s certificate is valid. In fact, it has the opposite effect: it overrides the default certificate validation logic in .NET and implements a custom validator which approves all certificates unconditionally by returning true on line 55. This technique is described here: https://stackoverflow.com/questions/12506575/how-to-ignore-the-certificate-check-when-ssl