mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-03 20:17:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

crypto/tls: add VerifyPeerCertificate to tls.Config

Browse source 
VerifyPeerCertificate returns an error if the peer should not be
trusted. It will be called after the initial handshake and before
any other verification checks on the cert or chain are performed.
This provides the callee an opportunity to augment the certificate
verification.

If VerifyPeerCertificate is not nil and returns an error,
then the handshake will fail.

Fixes #16363

Change-Id: I6a22f199f0e81b6f5d5f37c54d85ab878216bb22
Reviewed-on: https://go-review.googlesource.com/26654
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
This commit is contained in:
Joshua Boelter 2016-07-13 16:22:28 -06:00 • committed by Adam Langley
parent 50401d1e36
commit 8f3c635434
5 changed files with 182 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tls_test.go
View file

@ -477,7 +477,7 @@ func TestClone(t *testing.T) {
case "Rand":
f.Set(reflect.ValueOf(io.Reader(os.Stdin)))
continue
case "Time", "GetCertificate", "GetConfigForClient":
case "Time", "GetCertificate", "GetConfigForClient", "VerifyPeerCertificate":
// DeepEqual can't compare functions.
continue
case "Certificates":