8 commits

Author	SHA1	Message	Date
Andy Green	b06665b851	mbedtls: improve SNI for client certs	2017-12-01 11:37:35 +08:00
Andy Green	813b019bd1	lws_tls_server_certs_load: separate to allow cert attach later	2017-12-01 11:37:35 +08:00
Andy Green	a5514d2b2b	LWS_SERVER_OPTION_IGNORE_MISSING_CERT	2017-12-01 11:37:35 +08:00
Andy Green	0c254aba87	tls: add csr generation	2017-12-01 11:37:35 +08:00
Andy Green	1f37ec0be9	add selfsigned cert generation api	2017-11-26 19:17:11 +08:00
Andy Green	00ffebfd24	tls: add x509 query api ... This adds a single api on lws that allows querying elements from the peer certificate on a connection. The api works the same regardless of the TLS backend.	2017-11-26 19:16:17 +08:00
Andy Green	be525cb624	appveyor: Enable 64-bit build with OpenSSL and HTTP2 ... Fix warnings found from that Introduce lws_ptr_diff(head, tail) helper to normalize pointers to char *, do the subtraction and cast the result to int.	2017-11-26 19:16:17 +08:00
Andy Green	89cb55ea58	tls: split out common, openssl and mbedtls code ... - introduce lib/tls/mbedtls lib/tls/openssl - move wrapper into lib/tls/mbedtls/wrapper - introduce private helpers to hide backend This patch doesn't replace or remove the wrapper, it moves it to lib/tls/mbedtls/wrapper. But it should be now that the ONLY functions directly consuming wrapper apis are isolated in - lib/tls/mbedtls/client.c (180 lines) - lib/tls/mbedtls/server.c (317 lines) - lib/tls/mbedtls/ssl.c (325 lines) In particular there are no uses of openssl or mbedtls-related constants outside of ./lib/tls any more.	2017-10-25 07:17:29 +08:00