• Jarod Neuner's avatar
    Early TLS Handshake and Verification · 4af68bbd
    Jarod Neuner authored
    tport_type_tls.c:
    * tport_tls_accept():
      - Replaces tport_accept for incoming TLS connections.
    * tport_tls_connect():
      - Replaces tport_base_connect() for outgoing TLS connections.
    
    tport_tls.c:
    * tls_t now use a memory home instead of malloc.
    * removed tls_check_hosts()
    * tls_connect():
      - Replaces tport_base_connect for TLS connection setup.
      - Completes TLS handshake and verifies peer certificates.
      - Destroys suspect TLS connections before sending/receiving payload.
      - Populates a su_strlst_t with subjects from the peer certificate.
    
    tport.c:
    * tport_is_verified()
      - true if peer certificate validated successfully
    * tport_delivered_from_subjects()
      - Certificate subjects listed in the peer certificate.
    
    darcs-hash:20081216221937-2152f-3d6b74d411b57c22230e4840fca133da48c86368.gz
    4af68bbd