Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

server certificate selection callback #5454

Merged
merged 6 commits into from
Mar 10, 2022
+172 −44
Merged

server certificate selection callback #5454

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
2ed9527
Add server certificate selection callback
gstrauss Jan 21, 2022
36872db
Provide means to reset handshake cert list
gstrauss Jan 22, 2022
6989407
Add accessor to retrieve SNI during handshake
gstrauss Jan 24, 2022
48a37f0
Add cert_cb use to programs/ssl/ssl_server2.c
gstrauss Jan 24, 2022
0ebf24a
Adjust comment describing mbedtls_ssl_conf_sni()
gstrauss Jan 24, 2022
9bff95f
Adjust comment describing mbedtls_ssl_set_hs_own_cert()
gstrauss Mar 9, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Adjust comment describing mbedtls_ssl_set_hs_own_cert() 
mbedtls_ssl_set_hs_own_cert() is callable from the certificate selection
callback.

Signed-off-by: Glenn Strauss <[email protected]>
  • Loading branch information
@gstrauss
gstrauss committed Mar 10, 2022
commit 9bff95f051343b78d42ac2442b327413ed9a9b97
6 changes: 3 additions & 3 deletions include/mbedtls/ssl.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3565,7 +3565,7 @@ const unsigned char *mbedtls_ssl_get_hs_sni( mbedtls_ssl_context *ssl,
* \brief Set own certificate and key for the current handshake
*
* \note Same as \c mbedtls_ssl_conf_own_cert() but for use within
* the SNI callback.
* the SNI callback or the certificate selection callback.
*
* \note Passing null \c own_cert clears the certificate list for
* the current handshake.
Expand All @@ -3585,7 +3585,7 @@ int mbedtls_ssl_set_hs_own_cert( mbedtls_ssl_context *ssl,
* current handshake
*
* \note Same as \c mbedtls_ssl_conf_ca_chain() but for use within
* the SNI callback.
* the SNI callback or the certificate selection callback.
*
* \param ssl SSL context
* \param ca_chain trusted CA chain (meaning all fully trusted top-level CAs)
Expand All @@ -3599,7 +3599,7 @@ void mbedtls_ssl_set_hs_ca_chain( mbedtls_ssl_context *ssl,
* \brief Set authmode for the current handshake.
*
* \note Same as \c mbedtls_ssl_conf_authmode() but for use within
* the SNI callback.
* the SNI callback or the certificate selection callback.
*
* \param ssl SSL context
* \param authmode MBEDTLS_SSL_VERIFY_NONE, MBEDTLS_SSL_VERIFY_OPTIONAL or
Expand Down