diff options
| author | Timo Teräs <timo.teras@iki.fi> | 2017-10-05 16:39:47 +0300 |
|---|---|---|
| committer | Timo Teräs <timo.teras@iki.fi> | 2017-10-05 16:59:14 +0300 |
| commit | 52fd85a8dcfee9c93522d80693673bc95cc1caaf (patch) | |
| tree | 33022a0fb973c548ea7e1fdf2b1e9f1ff268f041 /libfetch/common.h | |
| parent | 531fea4c9082d6542c776dcb6d4ca0a3949ecdd0 (diff) | |
| download | apk-tools-52fd85a8dcfee9c93522d80693673bc95cc1caaf.tar.gz apk-tools-52fd85a8dcfee9c93522d80693673bc95cc1caaf.tar.bz2 apk-tools-52fd85a8dcfee9c93522d80693673bc95cc1caaf.tar.xz apk-tools-52fd85a8dcfee9c93522d80693673bc95cc1caaf.zip | |
libfetch: improve ssl connections
loosely based on the freebsd implementation, implement https
connection settings to override CA, and use client certificate.
new files supported in /etc/apk/:
ca.pem - if exists, it contains CAs acceptable for https
(otherwise system wide CAs are used)
crl.pem - if ca.pem is used, this is the (optional) CRL for it
cert.pem - used as client authentication certificate (+ key)
cert.key - used as client key (can be also inside cert.pem)
Diffstat (limited to 'libfetch/common.h')
| -rw-r--r-- | libfetch/common.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libfetch/common.h b/libfetch/common.h index e36027c..b643a34 100644 --- a/libfetch/common.h +++ b/libfetch/common.h @@ -39,6 +39,7 @@ #include <openssl/crypto.h> #include <openssl/x509.h> +#include <openssl/x509v3.h> #include <openssl/pem.h> #include <openssl/ssl.h> #include <openssl/err.h> |