mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-03-01 15:15:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
93e450793c
curl/lib/vtls
History
moparisthebest 93e450793c SSL: implement public key pinning 
Option --pinnedpubkey takes a path to a public key in DER format and
only connect if it matches (currently only implemented with OpenSSL).

Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt().

Extract a public RSA key from a website like so:
openssl s_client -connect google.com:443 2>&1 < /dev/null | \
sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \
| openssl rsa -pubin -outform DER > google.com.der
2014-10-07 14:44:19 +02:00
..
axtls.c axtls: define curlssl_random using axTLS's PRNG 2014-07-31 01:12:38 +02:00
axtls.h ssl: generalize how the ssl backend identifier is set 2014-07-31 12:19:51 +02:00
curl_darwinssl.c darwinssl: Use CopyCertSubject() to check CA cert. 2014-09-04 19:00:02 -05:00
curl_darwinssl.h ssl: generalize how the ssl backend identifier is set 2014-07-31 12:19:51 +02:00
curl_schannel.c curl_schannel.c: Fixed possible memory or handle leak 2014-10-04 18:24:23 +02:00
curl_schannel.h schannel: Fixed compilation warning in vtls.c 2014-08-08 21:34:05 +01:00
cyassl.c cyassl: fix the test for ASN_NO_SIGNER_E 2014-07-31 00:31:36 +02:00
cyassl.h ssl: generalize how the ssl backend identifier is set 2014-07-31 12:19:51 +02:00
gskit.c vtls: Fixed up include of vtls.h 2013-12-26 21:25:51 +00:00
gskit.h vtls: have the backend tell if it supports CERTINFO 2014-09-13 15:11:26 +02:00
gtls.c gtls: only define Curl_gtls_seed if Nettle is not being used 2014-08-03 11:18:08 +02:00
gtls.h ssl: generalize how the ssl backend identifier is set 2014-07-31 12:19:51 +02:00
nss.c vtls: make the random function mandatory in the TLS backend 2014-07-30 00:05:47 +02:00
nssg.h vtls: have the backend tell if it supports CERTINFO 2014-09-13 15:11:26 +02:00
openssl.c SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
openssl.h curlssl: make tls backend symbols use curlssl in the name 2014-09-13 15:31:12 +02:00
polarssl_threadlock.c
polarssl_threadlock.h
polarssl.c polarassl: avoid memset() when clearing the first byte is enough 2014-09-08 10:11:34 +02:00
polarssl.h curlssl: make tls backend symbols use curlssl in the name 2014-09-13 15:31:12 +02:00
qssl.c vtls: Fixed up include of vtls.h 2013-12-26 21:25:51 +00:00
qssl.h vtls: have the backend tell if it supports CERTINFO 2014-09-13 15:11:26 +02:00
vtls.c ssl: provide Curl_ssl_backend even if no SSL library is available 2014-08-03 10:43:31 +02:00
vtls.h ssl: provide Curl_ssl_backend even if no SSL library is available 2014-08-03 10:43:31 +02:00