Add PhHttpSocketSetSecurity

Author: dmex

ProcessHacker/ProcessHacker.def

@@ -723,6 +723,7 @@ EXPORTS
     PhHttpSocketReadDataToBuffer
     PhHttpSocketDownloadString
     PhHttpSocketSetFeature
+    PhHttpSocketSetSecurity
     PhHttpSocketParseUrl
     PhHttpSocketGetErrorMessage
     PhHttpSocketSetCredentials

phlib/http.c

@@ -43,6 +43,13 @@ static const PH_FLAG_MAPPING PhpHttpFeatureMappings[] =
     { PH_HTTP_FEATURE_KEEP_ALIVE, WINHTTP_DISABLE_KEEP_ALIVE },
 };
 
+static const PH_FLAG_MAPPING PhpHttpSecurityFlagsMappings[] =
+{
+    { PH_HTTP_SECURITY_IGNORE_UNKNOWN_CA, SECURITY_FLAG_IGNORE_UNKNOWN_CA },
+    { PH_HTTP_SECURITY_IGNORE_CERT_DATE_INVALID, SECURITY_FLAG_IGNORE_CERT_DATE_INVALID },
+};
+
+_Success_(return)
 BOOLEAN PhHttpSocketCreate(
     _Out_ PPH_HTTP_CONTEXT *HttpContext,
     _In_opt_ PWSTR HttpUserAgent
@@ -109,9 +116,12 @@ BOOLEAN PhHttpSocketCreate(
 }
 
 VOID PhHttpSocketDestroy(
-    _Frees_ptr_ PPH_HTTP_CONTEXT HttpContext
+    _In_ _Frees_ptr_ PPH_HTTP_CONTEXT HttpContext
     )
 {
+    if (!HttpContext)
+        return;
+
     if (HttpContext->RequestHandle)
         WinHttpCloseHandle(HttpContext->RequestHandle);
     if (HttpContext->ConnectionHandle)
@@ -402,6 +412,7 @@ PPH_STRING PhHttpSocketQueryHeaderString(
     return stringBuffer;
 }
 
+_Success_(return)
 BOOLEAN PhHttpSocketQueryHeaderUlong(
     _In_ PPH_HTTP_CONTEXT HttpContext,
     _In_ ULONG QueryValue,
@@ -524,6 +535,7 @@ PPH_STRING PhHttpSocketQueryOptionString(
     return stringBuffer;
 }
 
+_Success_(return)
 BOOLEAN PhHttpSocketReadDataToBuffer(
     _In_ PVOID RequestHandle,
     _Out_ PVOID *Buffer,
@@ -636,6 +648,28 @@ BOOLEAN PhHttpSocketSetFeature(
         );
 }
 
+BOOLEAN PhHttpSocketSetSecurity(
+    _In_ PPH_HTTP_CONTEXT HttpContext,
+    _In_ ULONG Feature
+    )
+{
+    ULONG featureValue = 0;
+
+    PhMapFlags1(
+        &featureValue,
+        Feature,
+        PhpHttpSecurityFlagsMappings,
+        RTL_NUMBER_OF(PhpHttpSecurityFlagsMappings)
+        );
+
+    return !!WinHttpSetOption(
+        HttpContext->RequestHandle,
+        WINHTTP_OPTION_SECURITY_FLAGS,
+        &featureValue,
+        sizeof(ULONG)
+        );
+}
+
 _Success_(return)
 BOOLEAN PhHttpSocketParseUrl(
     _In_ PPH_STRING Url,

phlib/include/phnet.h

@@ -157,6 +157,7 @@ typedef struct _PH_HTTP_CONTEXT
     PWSTR ServerName;
 } PH_HTTP_CONTEXT, *PPH_HTTP_CONTEXT;
 
+_Success_(return)
 PHLIBAPI
 BOOLEAN
 NTAPI
@@ -169,7 +170,7 @@ PHLIBAPI
 VOID
 NTAPI
 PhHttpSocketDestroy(
-    _Frees_ptr_ PPH_HTTP_CONTEXT HttpContext
+    _In_ _Frees_ptr_ PPH_HTTP_CONTEXT HttpContext
     );
 
 #define PH_HTTP_DEFAULT_PORT 0 // use the protocol-specific default port
@@ -268,6 +269,7 @@ PhHttpSocketQueryHeaderString(
 #define PH_HTTP_QUERY_CONTENT_LENGTH 0x1
 #define PH_HTTP_QUERY_STATUS_CODE 0x2
 
+_Success_(return)
 PHLIBAPI
 BOOLEAN
 NTAPI
@@ -286,6 +288,7 @@ PhHttpSocketQueryOptionString(
     _In_ ULONG QueryOption
     );
 
+_Success_(return)
 PHLIBAPI
 BOOLEAN
 NTAPI
@@ -315,6 +318,17 @@ PhHttpSocketSetFeature(
     _In_ BOOLEAN Enable
     );
 
+#define PH_HTTP_SECURITY_IGNORE_UNKNOWN_CA 0x1
+#define PH_HTTP_SECURITY_IGNORE_CERT_DATE_INVALID 0x2
+
+PHLIBAPI
+BOOLEAN
+NTAPI
+PhHttpSocketSetSecurity(
+    _In_ PPH_HTTP_CONTEXT HttpContext,
+    _In_ ULONG Feature
+    );
+
 _Success_(return)
 PHLIBAPI
 BOOLEAN