tunnelkit/Sources/TunnelKitOpenVPNAppExtension
Davide De Rosa 9c63b856cb
Verify CA from on-disk file (#237)
* Verify CA from on-disk file

Revert part of #213 again, because `SSL_CTX_load_verify_locations`
is just more reliable at setting up the trust store.

It looks like it's able to reference the .pem multiple times in
those cases where the root issuer of the CA is also embedded in
the file (which is the case with e.g. Let's Encrypt).

This is better than the current implementation, and I couldn't
easily find a way to do the same in-memory. I'd rather use the
standard API here.

See 7a85d3cac7
2021-11-27 12:32:30 +01:00
..
ConnectionStrategy.swift Increase components granularity 2021-11-11 15:18:03 +01:00
NETCPLink.swift Drop jazzy, will use DocC 2021-11-12 10:00:55 +01:00
NEUDPLink.swift Drop jazzy, will use DocC 2021-11-12 10:00:55 +01:00
OpenVPNTunnelProvider.swift Verify CA from on-disk file (#237) 2021-11-27 12:32:30 +01:00