search

the-tcpdump-group / libpcap

the LIBpcap interface to various kernel packet capture mechanism
https://www.tcpdump.org/
Other
2.72k stars 854 forks source link

TLS certificate not validated for rpcaps:// sources. #1080

Open ryancdotorg opened 2 years ago

ryancdotorg commented 2 years ago

Hi,

I was testing out rpcapd, and I noticed that there doesn't seem to be any validation of certificates for rpcaps:// sources, can we get this fixed? Some options will probably be needed to specify CAs. While it's being worked on, it'd be nice to be able to set the TLS cipher suites as well.

ryancdotorg commented 2 years ago

I'll write a patch to address this issue. Does someone want to assign it to me?

guyharris commented 2 years ago

Does someone want to assign it to me?

Done.

daluu commented 8 months ago

Has there been any progress on this?

ryancdotorg commented 7 months ago

I have a WIP patch - there's some difficulty in that rpcap works sort of like FTP in that there are separate data and control channels. Some plumbing work is required to carry over details needed to do server name validation.