openbsd/src/lib/libtls/Makefile, branch libressl-v2.3.8 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.8 2015-10-07T23:33:38+00:00 Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer certificate 2015-10-07T23:33:38+00:00 beck 2015-10-07T23:33:38+00:00 urn:sha1:5d82be7da232ba0ac24e658d65265454ddebf89c validity times for tls connections. ok jsing@ Provide tls_config_insecure_noverifytime() in order to be able to disable 2015-09-14T16:16:38+00:00 jsing 2015-09-14T16:16:38+00:00 urn:sha1:3e5c8273f252e9fe9e751d6fc17106fffbb4979d certificate validity checking. ok beck@ some conn_version and conn_cipher bits; 2015-09-14T14:29:30+00:00 jmc 2015-09-14T14:29:30+00:00 urn:sha1:da10e04d6e15dd983749cad53359bcdeb264bcb3 Move connection info into it's own private structure allocated and filled in 2015-09-12T21:00:38+00:00 beck 2015-09-12T21:00:38+00:00 urn:sha1:843b2711f954203e88a74d8355945a89c1ab90f1 at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@ typo 2015-09-11T15:17:46+00:00 deraadt 2015-09-11T15:17:46+00:00 urn:sha1:8fc064aaf89b322287d1f2f701361d0c1e18217a document tls_get_peer_subject, tls_get_peer_issuer, and tls_get_peer_hash 2015-09-11T13:59:20+00:00 beck 2015-09-11T13:59:20+00:00 urn:sha1:5b663c4f60901a6eecdc5be061c23dedbba1eba2 ok jsing@ add tls_peer functions for checking names and issuers of peer certificates. 2015-09-11T12:56:55+00:00 beck 2015-09-11T12:56:55+00:00 urn:sha1:27e5e00bb80457049b7e7613f43e8f1165402316 ok jsing@ Provide tls_peer_cert_hash() which returns a hash of the raw certificate 2015-09-11T11:28:01+00:00 jsing 2015-09-11T11:28:01+00:00 urn:sha1:0dd7e6b53207a35f05ffb30e367e39644d20f096 that was presented by the peer. The hash used is currently SHA256, however since we prefix the result with the hash name, we can change this in the future as the need arises. The same output can be generated by using: h=$(openssl x509 -outform der -in mycert.crt | sha256) printf "SHA256:${h}\n" ok beck@ sort MLINKS into the same order as the man page; 2015-09-11T07:07:23+00:00 jmc 2015-09-11T07:07:23+00:00 urn:sha1:03978d9d7e74ce51bdab9f6f8d0741fbee4d09f7 document client side certificate verification functionality. 2015-09-10T15:47:25+00:00 beck 2015-09-10T15:47:25+00:00 urn:sha1:82208d32389873dc0a35e1efb027536202112bf6 ok jsing@