Skip to content

P
pistache
Switch branch/tag
  1. 30 Sep, 2021 2 commits
  3. 28 Sep, 2021 7 commits
  5. 27 Sep, 2021 3 commits
  7. 20 Sep, 2021 1 commit
  9. 17 Sep, 2021 2 commits
  11. 15 Sep, 2021 7 commits
  13. 13 Sep, 2021 2 commits
  15. 12 Sep, 2021 1 commit
  17. 03 Sep, 2021 2 commits
  19. 30 Aug, 2021 2 commits
  21. 27 Aug, 2021 1 commit
    • Louis Solofrizzo's avatar
      [SERVER] ssl: Add the possibility for the user to set a password callback · 27c0c9ed
      Louis Solofrizzo authored 
      In order to use passphrase-protected keys.
This patch does not change the default behavior:

    server.useSSL("./cert/server.crt", "./cert/server.key");
    $> ./a.out
    Enter PEM pass phrase:
    [...]

    static int password_callback(char *buf, int size, int rwflag, void *u)
    {
        static const char *password = "foobar"; // _Please_ don't do that, that's an example
        strncpy(buf, password, size);
        return strlen(password);
    }

    server.useSSL("./cert/server.crt", "./cert/server.key", false, &password_callback);
    $> ./a.out
    Listening on 0.0.0.0:9080

Key has been generated with:

    $> openssl genrsa -aes128 -passout pass:foobar -out server.key 3072

If you intend to use this feature, please look at the recent
developments on memfd_secret[1] in order to actually store a passphrase
with relative security in memory.

[1] https://lwn.net/Articles/865256/Signed-off-by: default avatarLouis Solofrizzo <lsolofrizzo@scaleway.com>
      27c0c9ed
  23. 10 Aug, 2021 2 commits
  25. 05 Aug, 2021 2 commits
  27. 07 Jul, 2021 6 commits