Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Stick with the usual 'if NULL return NULL' idiom. | jsing | 2016-08-22 | 1 | -10/+10 |
| | | | | ok beck@ | ||||
* | Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵ | beck | 2015-10-07 | 1 | -1/+21 |
| | | | | | | | certificate validity times for tls connections. ok jsing@ | ||||
* | Move connection info into it's own private structure allocated and filled in | beck | 2015-09-12 | 1 | -90/+18 |
| | | | | | | at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@ | ||||
* | != -> == that I broke while bikeshedding | beck | 2015-09-11 | 1 | -2/+2 |
| | |||||
* | add tls_peer functions for checking names and issuers of peer certificates. | beck | 2015-09-11 | 1 | -1/+49 |
| | | | | ok jsing@ | ||||
* | Provide tls_peer_cert_hash() which returns a hash of the raw certificate | jsing | 2015-09-11 | 1 | -0/+87 |
that was presented by the peer. The hash used is currently SHA256, however since we prefix the result with the hash name, we can change this in the future as the need arises. The same output can be generated by using: h=$(openssl x509 -outform der -in mycert.crt | sha256) printf "SHA256:${h}\n" ok beck@ |