Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-08-22 | Stick with the usual 'if NULL return NULL' idiom. | Joel Sing | |
ok beck@ | |||
2015-10-07 | Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵ | Bob Beck | |
certificate validity times for tls connections. ok jsing@ | |||
2015-09-12 | Move connection info into it's own private structure allocated and filled in | Bob Beck | |
at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@ | |||
2015-09-11 | != -> == that I broke while bikeshedding | Bob Beck | |
2015-09-11 | add tls_peer functions for checking names and issuers of peer certificates. | Bob Beck | |
ok jsing@ | |||
2015-09-11 | Provide tls_peer_cert_hash() which returns a hash of the raw certificate | Joel Sing | |
that was presented by the peer. The hash used is currently SHA256, however since we prefix the result with the hash name, we can change this in the future as the need arises. The same output can be generated by using: h=$(openssl x509 -outform der -in mycert.crt | sha256) printf "SHA256:${h}\n" ok beck@ |