Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-04-22 | nss: implement public key pinning for NSS backend | Kamil Dudka | |
Bug: https://bugzilla.redhat.com/1195771 | |||
2014-11-24 | SSL: Add PEM format support for public key pinning | moparisthebest | |
2014-10-30 | CURLOPT_PINNEDPUBLICKEY.3: added details | Daniel Stenberg | |
2014-10-07 | SSL: implement public key pinning | moparisthebest | |
Option --pinnedpubkey takes a path to a public key in DER format and only connect if it matches (currently only implemented with OpenSSL). Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt(). Extract a public RSA key from a website like so: openssl s_client -connect google.com:443 2>&1 < /dev/null | \ sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \ | openssl rsa -pubin -outform DER > google.com.der |