summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls_peer.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Stick with the usual 'if NULL return NULL' idiom.jsing2016-08-221-10/+10
| | | | ok beck@
* Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵beck2015-10-071-1/+21
| | | | | | | certificate validity times for tls connections. ok jsing@
* Move connection info into it's own private structure allocated and filled inbeck2015-09-121-90/+18
| | | | | | at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@
* != -> == that I broke while bikesheddingbeck2015-09-111-2/+2
|
* add tls_peer functions for checking names and issuers of peer certificates.beck2015-09-111-1/+49
| | | | ok jsing@
* Provide tls_peer_cert_hash() which returns a hash of the raw certificatejsing2015-09-111-0/+87
that was presented by the peer. The hash used is currently SHA256, however since we prefix the result with the hash name, we can change this in the future as the need arises. The same output can be generated by using: h=$(openssl x509 -outform der -in mycert.crt | sha256) printf "SHA256:${h}\n" ok beck@