facebookincubator / fizz

C++14 implementation of the TLS-1.3 standard
Other
1.14k stars 162 forks source link

Server side delegated credentials #62

Open Akatsukikain opened 3 years ago

Akatsukikain commented 3 years ago

I'm trying to use server side delegated cerentials with Fizz using the following command but I get an error, also I've got some questions: ./fizz s_server -delegatedcred deleg -cert delegation_cert.pem -key p256_dc_key.pem --> E0616 18:31:50.221060 24958 FizzServerCommand.cpp:977] Credential parsing failed: underflow

Why doen't it work ? I used a valid credential that I got from fizz gendc command

Also I get that for the cert it's going to be the delegation certificate but what about the -key is it the key of the delegation_cert or the credential ? Or is it both in that case isn't it weird since the whole point of delegated credentials is to make sure our cert's private key is safe and secure ?

Thanks in advance Hala