curl/tests/certs
moparisthebest 93e450793c SSL: implement public key pinning
Option --pinnedpubkey takes a path to a public key in DER format and
only connect if it matches (currently only implemented with OpenSSL).

Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt().

Extract a public RSA key from a website like so:
openssl s_client -connect google.com:443 2>&1 < /dev/null | \
sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \
| openssl rsa -pubin -outform DER > google.com.der
2014-10-07 14:44:19 +02:00
..
scripts SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
EdelCurlRoot-ca.cacert
EdelCurlRoot-ca.cnf
EdelCurlRoot-ca.crt
EdelCurlRoot-ca.csr
EdelCurlRoot-ca.der
EdelCurlRoot-ca.key
EdelCurlRoot-ca.prm
Makefile.am
Server-localhost0h-sv.crl
Server-localhost0h-sv.crt
Server-localhost0h-sv.csr
Server-localhost0h-sv.der
Server-localhost0h-sv.dhp
Server-localhost0h-sv.key
Server-localhost0h-sv.p12
Server-localhost0h-sv.pem
Server-localhost0h-sv.prm
Server-localhost0h-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
Server-localhost-sv.crl
Server-localhost-sv.crt
Server-localhost-sv.csr
Server-localhost-sv.der
Server-localhost-sv.dhp
Server-localhost-sv.key
Server-localhost-sv.p12
Server-localhost-sv.pem
Server-localhost-sv.prm
Server-localhost-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
Server-localhost.nn-sv.crl
Server-localhost.nn-sv.crt
Server-localhost.nn-sv.csr
Server-localhost.nn-sv.der
Server-localhost.nn-sv.dhp
Server-localhost.nn-sv.key
Server-localhost.nn-sv.pem
Server-localhost.nn-sv.prm
Server-localhost.nn-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
srp-verifier-conf
srp-verifier-db