Rocket

Commit Graph

Author	SHA1	Message	Date
Sergio Benitez	677790d639	Bring back generated TLS keys, used by tests.	2021-07-09 16:35:09 -07:00
Sergio Benitez	71823915db	Don't store example keys and certs in repository.	2021-07-07 12:16:12 -07:00
Sergio Benitez	237370533c	Update cert in 'tls' example for new 'rustls'. The latest version of `rustls` acts on the SNI extension to TLS without the apparent ability to disable the behavior. `rustls` requires that the server's certificate match the client's requested server. The matching is done by looking at DNS names in the `subjectAltName` extension and checking if the requested server name is present. Since the certificate in the `tls` example did not have the `subjectAltName` extension, this check always failed, and the TLS connection was aborted. This commit adds the extension to the certificate with a DNS name of `localhost`, ensuring that TLS succeeds on `localhost`.	2017-09-01 03:16:36 -07:00

Author

SHA1

Message

Date

Sergio Benitez

677790d639

Bring back generated TLS keys, used by tests.

2021-07-09 16:35:09 -07:00

Sergio Benitez

71823915db

Don't store example keys and certs in repository.

2021-07-07 12:16:12 -07:00

Sergio Benitez

237370533c

Update cert in 'tls' example for new 'rustls'.

The latest version of `rustls` acts on the SNI extension to TLS without
the apparent ability to disable the behavior. `rustls` requires that the
server's certificate match the client's requested server. The matching
is done by looking at DNS names in the `subjectAltName` extension and
checking if the requested server name is present. Since the certificate
in the `tls` example did not have the `subjectAltName` extension, this
check always failed, and the TLS connection was aborted. This commit
adds the extension to the certificate with a DNS name of `localhost`,
ensuring that TLS succeeds on `localhost`.

2017-09-01 03:16:36 -07:00

3 Commits