[PATCH 0/4] TLS client: Improve certificate validation
j at w1.fi
Sun Nov 29 15:47:47 PST 2015
On Sun, Nov 22, 2015 at 02:02:54AM +0100, Pali Rohár wrote:
> This patch series implements hash://server/sha256/cert_hash_in_hex syntax for
> ca_cert property, correctly skip validation if ca_cert is not specified and
> implements validation for certificate with SHA384 and SHA512 hashes.
> Pali Rohár (4):
> TLS client: Do not verify CA certificates when ca_cert is not
> TLS client: Add support for validating server certificate
> Crypto: Add SHA384 and SHA512 implementation from LibTomCrypt library
> TLS client: Validate certificates with SHA384 and SHA512 hashes
Thanks, applied with some cleanup.
Jouni Malinen PGP id EFC895FA
More information about the Hostap