[OpenWrt-Devel] [PATCH v2] ustream-ssl: add optional mutual authentication (mTLS)

2018-08-30 Thread Nuno Morais
Fix tabs vs spaces, the cast to (void *) is according to the other casts. Signed-off-by: Nuno Morais Co-Developed-by: Jose Vieira --- ustream-internal.h | 1 + ustream-mbedtls.c | 10 ++ ustream-openssl.c | 12 ustream-ssl.c | 1 + ustream-ssl.h | 2 ++ 5

[OpenWrt-Devel] [PATCH v2] uhttpd: add support for mutual authentication (mTLS)

2018-08-30 Thread Nuno Morais
From: Nuno Morais Fix tabs vs spaces Add new optional argument to function header to add CA_certificate to avoid replicated code This patch depends on patch "[OpenWrt-Devel] [PATCH] ustream-ssl: add optional mutual authentication (mTLS)" Signed-off-by: Nuno Morais Co-Developed-by: J

[OpenWrt-Devel] [PATCH v2] uhttpd: add support for mutual authentication (mTLS)

2018-08-23 Thread Nuno Morais
From: Nuno Morais Fix tabs vs spaces Add new optional argument to function header to add CA_certificate to avoid replicated code This patch depends on patch "[OpenWrt-Devel] [PATCH] ustream-ssl: add optional mutual authentication (mTLS)" Signed-off-by: Nuno Morais Co-Developed-by: J

[OpenWrt-Devel] [PATCH v2] ustream-ssl: add optional mutual authentication (mTLS)

2018-08-23 Thread Nuno Morais
Fix tabs vs spaces, the cast to (void *) is according to the other casts. Signed-off-by: Nuno Morais Co-Developed-by: Jose Vieira --- ustream-internal.h | 1 + ustream-mbedtls.c | 10 ++ ustream-openssl.c | 12 ustream-ssl.c | 1 + ustream-ssl.h | 2 ++ 5

[OpenWrt-Devel] [PATCH] uhttpd: add support for mutual authentication (mTLS)

2018-08-20 Thread Nuno Morais
From: Nuno Morais Optional mutual authentication (mTLS) by providing a CA certificate through a new new flag "-M" in order to verify client's identity. For B2B applications. This patch depends on patch "[OpenWrt-Devel] [PATCH] ustream-ssl: add optional mutual authentication

[OpenWrt-Devel] [PATCH] ustream-ssl: add optional mutual authentication (mTLS)

2018-08-20 Thread Nuno Morais
For B2B applications, mutual authentication of peers is a requirement. Add operation to enable / disable peer authentication adding a new operation to the ustream_ssl_ops struct using "SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT", and "MBEDTLS_SSL_VERIFY_REQUIRED".