mirleft / ocaml-x509

X509 (RFC5280) handling in OCaml
BSD 2-Clause "Simplified" License
52 stars 34 forks source link

simplify fingerprint validation and authentication: pass a single fingerprint #153

Closed hannesm closed 3 years ago

hannesm commented 3 years ago

Previously a list of name and fingerprint was passed, which was not used at all. In practice, a single fingerprint is sufficient. With this change, providing the fingerprint of a certificate that is valid for certain IP addresses will work nicely (similar to what #152 does for chain of trust).

//cc @reynir