Robin Sommer
1e46466114
Add option to disable hostname check ( #399 )
...
* Suppress compiler warnings about unused elements.
* Enable CMake's compilation database.
* Add TLS option to disable checking a certificate's host name.
* Add `--disable-hostname-validation` to `ws`.
* Add test for disabling hostname validation.
2022-10-12 06:41:32 -07:00
Benjamin Sergeant
9f770b10c0
clang-format
2020-04-24 15:34:00 -07:00
Max Weisel
677f79b0ea
Implement API for adding custom roots via a string ( #178 )
...
* Implement API for adding custom roots via a string. SocketTLSOptions API design needs work, but the IXSocketOpenSSL implementation feels good to me.
* Improve API design for specifying roots from memory.
* Add in-memory root CAs mbedtls implementation.
* Fix bug in newer versions of OpenSSL with in-memory certificate handling.
2020-04-24 15:32:11 -07:00
Benjamin Sergeant
d7318f97e6
(tls) add a simple description of the TLS configuration routine for debugging
2019-12-20 15:18:04 -08:00
Benjamin Sergeant
0679b6399f
(tls options client) TLSOptions struct _validated member should be initialized to false
2019-12-17 14:10:28 -08:00
Benjamin Sergeant
d6542383ed
Add --tls option to pass to ws server command, to enable/disable tls
2019-10-01 13:54:46 -07:00
Benjamin Sergeant
d1fb34694c
SocketTLSOptions: more methods (contributed by Matt DeBoer)
2019-09-29 17:35:18 -07:00
Benjamin Sergeant
cd3c9d879c
reformat everything with clang-format
2019-09-23 10:25:23 -07:00
Matt DeBoer
408ee41990
WIP: support configurable certificates/keys, and root trust CAs ( #114 )
...
* wip: tls options implemented in openssl
* update naming, remove #define guard
* assert compiled with USE_TLS for tls options
* apply autoformatter
* include tls options impl
* style cleanup; auto ssl_err
* ssl_err -> sslErr
* be explicit about SSL_VERIFY_NONE
2019-09-22 18:06:15 -07:00