From 93e450793ce289925dfd1d5e3b2d14e781f8dfd4 Mon Sep 17 00:00:00 2001 From: moparisthebest Date: Tue, 30 Sep 2014 22:31:17 -0400 Subject: SSL: implement public key pinning Option --pinnedpubkey takes a path to a public key in DER format and only connect if it matches (currently only implemented with OpenSSL). Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt(). Extract a public RSA key from a website like so: openssl s_client -connect google.com:443 2>&1 < /dev/null | \ sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \ | openssl rsa -pubin -outform DER > google.com.der --- tests/certs/Server-localhost.nn-sv.pub.der | Bin 0 -> 162 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 tests/certs/Server-localhost.nn-sv.pub.der (limited to 'tests/certs/Server-localhost.nn-sv.pub.der') diff --git a/tests/certs/Server-localhost.nn-sv.pub.der b/tests/certs/Server-localhost.nn-sv.pub.der new file mode 100644 index 000000000..b67ab96ed Binary files /dev/null and b/tests/certs/Server-localhost.nn-sv.pub.der differ -- cgit v1.2.3