summaryrefslogtreecommitdiff
path: root/lib/libtls/tls_peer.c
AgeCommit message (Collapse)Author
2016-08-22Stick with the usual 'if NULL return NULL' idiom.Joel Sing
ok beck@
2015-10-07Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵Bob Beck
certificate validity times for tls connections. ok jsing@
2015-09-12Move connection info into it's own private structure allocated and filled inBob Beck
at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@
2015-09-11!= -> == that I broke while bikesheddingBob Beck
2015-09-11add tls_peer functions for checking names and issuers of peer certificates.Bob Beck
ok jsing@
2015-09-11Provide tls_peer_cert_hash() which returns a hash of the raw certificateJoel Sing
that was presented by the peer. The hash used is currently SHA256, however since we prefix the result with the hash name, we can change this in the future as the need arises. The same output can be generated by using: h=$(openssl x509 -outform der -in mycert.crt | sha256) printf "SHA256:${h}\n" ok beck@