mirror of
https://github.com/esp8266/Arduino.git
synced 2025-04-22 21:23:07 +03:00
9eaeca3a03
X509 context contains certificate fingerprint and various names which may be used to verify the certificate. Previously we would free it right after the handshake completion, which prevented the client from actually using any information from X509 context. Postponing this to the first ssl_read/ssl_write call after the handshake, we give the client a chance to verify the certificate. Also added logging to ssl_match_fingerprint function in case fingerprint doesn't match expected value.
Replacement for Espressif's libssl, kept as close as possible to axTLS source. Currently based on axTLS 1.4.9, will be upgraded to 1.5.3.
This is not a self-sufficient library. Application has to provide the following symbols (list not complete yet):
malloc
calloc
free
abort
gettimeofday
time
ctime
printf
vprintf
Additionally, functions for non-blocking TCP socket reads and writes have to be provided (details TBD).
To build, add xtensa toolchain to your path, and run make.
See LICENSE file for axTLS license.