curl/tests/data/test2034, branch gemini-meta cURL mirror with patches applied SSL: Add PEM format support for public key pinning 2014-11-24T18:30:09+00:00 moparisthebest admin@moparisthebest.com 2014-11-24T18:30:09+00:00 be1a5051890b7ad9339b0208424b94aa32c64776 






tests: add new feature 'SSLpinning'
2014-11-04T22:02:09+00:00

Daniel Stenberg
daniel@haxx.se

2014-11-04T22:02:09+00:00

445aab4b7339494e7abce394b4c5cd788df31634

... and make test 2034 and 2035 require it, and have it set when built
with OpenSSL or GnuTLS.





... and make test 2034 and 2035 require it, and have it set when built
with OpenSSL or GnuTLS.







SSL: implement public key pinning
2014-10-07T12:44:19+00:00

moparisthebest
admin@moparisthebest.com

2014-10-01T02:31:17+00:00

93e450793ce289925dfd1d5e3b2d14e781f8dfd4

Option --pinnedpubkey takes a path to a public key in DER format and
only connect if it matches (currently only implemented with OpenSSL).

Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt().

Extract a public RSA key from a website like so:
openssl s_client -connect google.com:443 2>&1 < /dev/null | \
sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \
| openssl rsa -pubin -outform DER > google.com.der





Option --pinnedpubkey takes a path to a public key in DER format and
only connect if it matches (currently only implemented with OpenSSL).

Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt().

Extract a public RSA key from a website like so:
openssl s_client -connect google.com:443 2>&1 < /dev/null | \
sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \
| openssl rsa -pubin -outform DER > google.com.der