add callback to allow additional server verification certs
authorAndy Green <andy@warmcat.com>
Sun, 20 Feb 2011 11:10:47 +0000 (11:10 +0000)
committerAndy Green <andy@warmcat.com>
Sun, 20 Feb 2011 11:10:47 +0000 (11:10 +0000)
commitc6bf2c2186a6d1ae12ab782731a12cd5ef2ff809
tree68bd736237b3452b952ad02d50504eec0bca42d1
parent0894bda18419834274d7555bc3e300307a4542ac
add callback to allow additional server verification certs

This adds a LWS_CALLBACK_OPENSSL_LOAD_EXTRA_SERVER_VERIFY_CERTS callback
which offers a chance for the server context to be loaded with additional
certtificates allowing it to verify incoming client certs.  The callback
always comes to protocol[0].

It also introduces the context option LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT
which will enforce client cert checking on any ssl connection.

Signed-off-by: Andy Green <andy@warmcat.com>
lib/libwebsockets.c
lib/libwebsockets.h