igrr / axtls-8266

axTLS port for ESP8266
Other
79 stars 33 forks source link

Initial version of the CA public key fingerprint check. #47

Open slaff opened 7 years ago

slaff commented 7 years ago

Tested on real device with three different web-site certificates. This PR is just initial work we can build on top of it to allow fingerprinting on CA'a public key.

Related to #44.

slaff commented 7 years ago

@igrr Any comments on this? The code is tested on real device and was working as expected. I would be glad to get your feedback.

igrr commented 6 years ago

Hi @slaff, can you make a version of the commit without the ssl_match_auth_key_sha1 function? As discussed above, asn1_auth_key_id is useful, and i would like to merge it and continue implementing the rest of the logic.

slaff commented 6 years ago

can you make a version of the commit without the ssl_match_auth_key_sha1 function

@igrr Yes, it will try to make the changes early next week so that you can build on top of them.

slaff commented 6 years ago

@igrr ssl_match_auth_key_sha1 is removed. If there are no other issues squash this PR and add the rest of the logic.