Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(esp-tls): make the wolfSSL backend send entire client certificate… (IDFGH-12621) #13618

Closed
wants to merge 2 commits into from

Commits on Apr 15, 2024

  1. fix(esp-tls): make the wolfSSL backend send entire client certificate…

    … chains
    
    This change makes the wolfSSL backend sent the complete TLS client certificate
    chain. This align the wolfSSL backend with the behavior of the mbedTLS backend.
    Some servers need the intermediate certificates to verify a client certificate.
    If the provided PEM file contains only a single certificate this change has no effect
    and the behavior will be as before.
    This impacts higher level APIs to function as someone would expect.
    E.g.: esp_websocket_client_config_t.client_cert: when passing here a pem
    file containing 2 certificates (the CA's and the client's) it would be
    expected that both are transmitted during TLS handshake.
    frankencode committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    05d3c06 View commit details
    Browse the repository at this point in the history

Commits on May 30, 2024

  1. change(esp-tls): make wolfSSL backend send SNI and enable OCSP

    Almost all sites these days are virtually hosted and hence
    SNI (server name indicator TLS extension) should be enabled by
    default.
    
    In addition this change enables OCSP (online server status protocol)
    support for esp-tls clients using the wolfSSL backend.
    The 3 code lines enable OCSP stabling v1.
    By default this feature is disabled.
    (I will send another PR on esp-wolfssl repository to allow to
    enable it easily.)
    frankencode committed May 30, 2024
    Configuration menu
    Copy the full SHA
    d2d43bb View commit details
    Browse the repository at this point in the history