]> git.proxmox.com Git - proxmox-websocket-tunnel.git/commit
projects / proxmox-websocket-tunnel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c18e63b) | patch
add fingerprint validation
authorFabian Grünbichler <f.gruenbichler@proxmox.com>
Thu, 3 Feb 2022 12:41:27 +0000 (13:41 +0100)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Fri, 4 Feb 2022 08:15:40 +0000 (09:15 +0100)
commit838b8aafca2e07b955eec9345a5b6aff9bbf05f0
tree059f898107d1c840dbb8d544bb2f18ad2cdf64eatree
parentc18e63b96f668dbf33592f3c39537295d6be9192commit | diff
add fingerprint validation

in case we have no explicit fingerprint, we use openssl's regular "PEER"
verification. if we have a fingerprint, we ignore openssl verification
results altogether and just verify the fingerprint of the presented leaf
certificate, skipping the rest of the certificate chain (depth != 0).

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
src/main.rs diff | blob | blame | history
Proxmox websocket tunneling helper