Re: [pve-devel] [PATCH v3 proxmox-websocket-tunnel 3/4] add fingerprint validation

2022-01-19 Thread Fabian Ebner
Am 19.01.22 um 11:34 schrieb Fabian Grünbichler: On January 4, 2022 12:37 pm, Fabian Ebner wrote: Am 22.12.21 um 14:52 schrieb Fabian Grünbichler: in case we have no explicit fingerprint, we use openssl's regular "PEER" verification. if we have a fingerprint, we ignore openssl altogether and ju

Re: [pve-devel] [PATCH v3 proxmox-websocket-tunnel 3/4] add fingerprint validation

2022-01-19 Thread Fabian Grünbichler
On January 4, 2022 12:37 pm, Fabian Ebner wrote: > Am 22.12.21 um 14:52 schrieb Fabian Grünbichler: >> in case we have no explicit fingerprint, we use openssl's regular "PEER" >> verification. if we have a fingerprint, we ignore openssl altogether and >> just verify the fingerprint of the presented

Re: [pve-devel] [PATCH v3 proxmox-websocket-tunnel 3/4] add fingerprint validation

2022-01-04 Thread Fabian Ebner
Am 22.12.21 um 14:52 schrieb Fabian Grünbichler: in case we have no explicit fingerprint, we use openssl's regular "PEER" verification. if we have a fingerprint, we ignore openssl altogether and just verify the fingerprint of the presented leaf certificate. Signed-off-by: Fabian Grünbichler ---

[pve-devel] [PATCH v3 proxmox-websocket-tunnel 3/4] add fingerprint validation

2021-12-22 Thread Fabian Grünbichler
in case we have no explicit fingerprint, we use openssl's regular "PEER" verification. if we have a fingerprint, we ignore openssl altogether and just verify the fingerprint of the presented leaf certificate. Signed-off-by: Fabian Grünbichler --- Notes: v3: switch to using hex instead of no-