aboutsummaryrefslogtreecommitdiff
path: root/docs/nng_tls_config_own_cert.adoc
Commit message (Collapse)AuthorAge
* More man page reorganization.Garrett D'Amore2018-02-25
| | | | | | Man pages need special handling, and we can have other kinds of documentation like initial starting guides, etc., which would have different processing applied. So lets move them off into their own directory.
* Better way to handle copyright.Garrett D'Amore2018-02-25
| | | | | | | | We move the copyright info along with trademark info to the refman layout. The source files still have their own inline copyright (now in correct readable form). This leads towards being able to generate that master reference manual.
* Remove some attribute declarations, use build scripts.Garrett D'Amore2018-02-23
| | | | | | | | | This is phase 1. We still have the copyright text in place for now, but I intend to replace that too. The reason for this is to facilitate efforts to build a larger reference manual as a single PDF book file. The other problem I have to solve is the fact that man page chapters wind up creating page breaks, which is not desirable for a book form.
* Minor markup fixes for TLS pages.Garrett D'Amore2018-02-15
|
* Update markup with simpler copyright and new-style asciidoctor.Garrett D'Amore2018-02-02
|
* fixes #201 TLS configuration should support files for certificates and keysGarrett D'Amore2018-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | This adds support for configuration of TLS websockets using the files for keys, certificates, and CRLs. Significant changes to the websocket, TLS, and HTTP layers were made here. We now expect TLS configuration to be tied to the HTTP layer, and the HTTP code creates default configuration objects based on the URL supplied. (HTTP dialers and listeners are now created with a URL rather than a sockaddr, giving them access to the scheme as well.) We fixed several bugs affecting TLS validation, and added a test suite that confirms that validation works as it should. We also fixed an orphaned socket during HTTP negotiation, responsible for an occasional assertion error if the http handshake does not complete successfully. Finally several use-after-free races were closed. TLS layer changes include reporting of handshake failures using newly created "standard" error codes for peer authentication and cryptographic failures. The use of the '*' wild card in URLs at bind time is no longer supported for websocket at least. Documentation updates for all this are in place as well.
* fixes #186 Suggested API changes for nng TLS certsGarrett D'Amore2018-01-09