CA verification and client-side certificate verification

reyk / httpd

OpenBSD httpd

Other

314 stars 31 forks source link

CA verification and client-side certificate verification #68

Open ghost opened 7 years ago

ghost commented 7 years ago

I don't know if you would consider this to be featuritis or not but I would really like to see support for CA and client-side certificate verification and validation. I am looking forward to the continuing maturation of httpd. It is light years ahead of apache and nginx in terms of rapid deployment and sane configuration.

ghost commented 7 years ago

Maybe reyk would really consider this feature because two years ago he mentioned to think about it again if libtls would integrate SNI (https://github.com/reyk/httpd/issues/23). After @jsing added it (http://undeadly.org/cgi?action=article&sid=20160823100144) now, there could be hope...

ghost commented 7 years ago

By "client-side certificate verification and validation" do you mean the same thing as client-certificate authentication? If so I would like to see that feature also.