[PATCH 0/6] NaCl changes

Kevin Cernekee cernekee at gmail.com
Thu Apr 14 23:05:59 PDT 2016


These patches fill in a couple more capabilities needed by the Chrome
OS client.  The [RFC] patch is unfinished; I'll do the rest once
we agree on the API.

Other missing pieces include:

 - PKCS#11 or equivalent, for using hardware-backed certs.  Note that
   there are no shared libraries on PNaCl, which complicates matters.
 - GnuTLS support?  This compiles but crashes; needs debugging.
 - Proper handling of MTU changes.


Kevin Cernekee (6):
  dtls: Fix memcmp() arguments in MTU detection code
  NaCl: Disable IPV6_PATHMTU getsockopt() call
  Allow OC_CMD_PAUSE to abort connection attempts
  library: Add reconnected() callback
  library: Add openconnect_get_dnsname()
  [RFC] library: Add openconnect_get_peer_cert_chain()

 dtls.c                                             |  6 +--
 .../infradead/libopenconnect/LibOpenConnect.java   |  2 +
 jni.c                                              | 24 ++++++++++
 libopenconnect.map.in                              |  4 ++
 library.c                                          | 11 +++++
 openconnect-internal.h                             |  2 +
 openconnect.h                                      | 36 ++++++++++++++
 openssl.c                                          | 56 ++++++++++++++++++++--
 ssl.c                                              |  6 ++-
 9 files changed, 140 insertions(+), 7 deletions(-)

-- 
1.9.1




More information about the openconnect-devel mailing list