[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [Libevent-users] evhttp and TLS hostname validation

To: libevent-users@xxxxxxxxxxxxx
Subject: Re: [Libevent-users] evhttp and TLS hostname validation
From: Nick Mathewson <nickm@xxxxxxxxxxxxx>
Date: Mon, 10 Dec 2012 02:36:15 -0500
Delivered-to: archiver@xxxxxxxx
Delivered-to: libevent-users-outgoing@xxxxxxxx
Delivered-to: libevent-users@xxxxxxxx
Delivery-date: Mon, 10 Dec 2012 02:36:18 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type; bh=RLRZz0cwXStxmNNDxANhLyTearP5qaXiiYJwFAfr5u8=; b=vO+SZDTcSy2iVh1x2K/YSjvI+VXT+ru0/BKGKUwREx8jybHg+ez8NRzolBLKwVIRtv 8VvFJHO0HyA6oC5t1xaCGkgJAp9/kh6YATjuQd2hvC1i7bHAKRnnjz3/OWqxFOErTGPt +svfe2OeO9RFVZVefTol490Nv7wWAnLAemzpP8Lqqs7951dd0p9G+VLtJFV+ghLz519t 5ynvOKhDa5CT7Efw1BiDzuKxZwUyCuFskKbtXr8KYLhIfOHC5M+SPFsZeP8wyd35iU7A 5Pxme6Z4S6pX/hJmnaVDGPyOiCoE62d0Z3cqdVwGogzok8LpP6t3GBqRTDbAb3KH0oat ta/w==
In-reply-to: <50C31E90.60005@xxxxxxxxxx>
References: <50C31E90.60005@xxxxxxxxxx>
Reply-to: libevent-users@xxxxxxxxxxxxx
Sender: owner-libevent-users@xxxxxxxxxxxxx

On Sat, Dec 8, 2012 at 6:03 AM, Patrick Pelletier <ppelletier@xxxxxxxxxx> wrote:

> However, it's not clear to me how to work the validation function
> (validate_hostname) into evhttp's control flow.  It seems that I would need
> to call validate_hostname after the TLS handshake occurs, but before evhttp
> starts transferring data.  But, I don't know how to get evhttp to hand over
> control to me at that time, so I can call validate_hostname.

I might be missing something, but have you looked at
SSL_CTX_set_verify and SSL_CTX_set_verify_callback? It would appear
that openssl lets you pass it a function to be used to help validating
certificates.

yrs,
-- 
Nick
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxx with
unsubscribe libevent-users    in the body.

Follow-Ups:
- Re: [Libevent-users] evhttp and TLS hostname validation
  - From: Oscar Koeroo

References:
- [Libevent-users] evhttp and TLS hostname validation
  - From: Patrick Pelletier

Prev by Author: Re: [Libevent-users] event base assert locked segmentation fault
Next by Author: Re: [Libevent-users] UDP Support
Previous by thread: [Libevent-users] evhttp and TLS hostname validation
Next by thread: Re: [Libevent-users] evhttp and TLS hostname validation
Index(es):
- Author
- Thread