Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for client certificate fingerprint whitelist #62

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from
Draft

Support for client certificate fingerprint whitelist #62

wants to merge 3 commits into from

Commits on Aug 20, 2021

  1. Remove client_ca_file from tests 

    client_ca_file is used to validate client certificate. However,
in tests, client never present any.

Signed-off-by: WGH <wgh@torlan.ru>
    @WGH-
    WGH- committed Aug 20, 2021
    Configuration menu
    Copy the full SHA
    f62acde View commit details
    Browse the repository at this point in the history

  2. Add proper tests for TLS client certificates 

    Add tests cases when the client actually sends a certificate, and check
how the server responds to it.

The client certificates were generated with this command:

    openssl req -x509 -newkey ec:<(openssl ecparam -name secp384r1) -keyout client2_selfsigned.key -out client2_selfsigned.pem -nodes -subj '/CN=test2' -days 36500 -addext "extendedKeyUsage = clientAuth"

Signed-off-by: WGH <wgh@torlan.ru>
    @WGH-
    WGH- committed Aug 20, 2021
    Configuration menu
    Copy the full SHA
    83566fc View commit details
    Browse the repository at this point in the history

  3. WIP: Add support for certificate fingerprint whitelist 

    This is useful for simple setups that don't require full-blown
CAs for mutual authentication.

Signed-off-by: WGH <wgh@torlan.ru>
    @WGH-
    WGH- committed Aug 20, 2021
    Configuration menu
    Copy the full SHA
    eaddac4 View commit details
    Browse the repository at this point in the history