fix(bots): Allow bots with self-signed certificates

Signed-off-by: Joas Schilling <[email protected]>

lib/Service/BotService.php

@@ -38,6 +38,7 @@
 use OCP\AppFramework\Utility\ITimeFactory;
 use OCP\Http\Client\IClientService;
 use OCP\Http\Client\IResponse;
+use OCP\ICertificateManager;
 use OCP\IConfig;
 use OCP\ISession;
 use OCP\IURLGenerator;
@@ -50,18 +51,19 @@
 
 class BotService {
 	public function __construct(
-		protected BotServerMapper       $botServerMapper,
+		protected BotServerMapper $botServerMapper,
 		protected BotConversationMapper $botConversationMapper,
-		protected IClientService        $clientService,
-		protected IConfig               $serverConfig,
-		protected IUserSession          $userSession,
-		protected TalkSession           $talkSession,
-		protected ISession              $session,
-		protected ISecureRandom         $secureRandom,
-		protected IURLGenerator         $urlGenerator,
-		protected IFactory              $l10nFactory,
-		protected ITimeFactory          $timeFactory,
-		protected LoggerInterface       $logger,
+		protected IClientService $clientService,
+		protected IConfig $serverConfig,
+		protected IUserSession $userSession,
+		protected TalkSession $talkSession,
+		protected ISession $session,
+		protected ISecureRandom $secureRandom,
+		protected IURLGenerator $urlGenerator,
+		protected IFactory $l10nFactory,
+		protected ITimeFactory $timeFactory,
+		protected LoggerInterface $logger,
+		protected ICertificateManager $certificateManager,
 	) {
 	}
 
@@ -173,9 +175,9 @@ protected function sendAsyncRequests(array $bots, array $body): void {
 			];
 
 			$data = [
-				'verify' => false,
+				'verify' => $this->certificateManager->getAbsoluteBundlePath(),
 				'nextcloud' => [
-					'allow_local_address' => true, // FIXME don't enforce
+					'allow_local_address' => true,
 				],
 				'headers' => $headers,
 				'timeout' => 5,