[gnutls-devel] GnuTLS | WIP: RFC7250 Raw public keys (!650)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Mon Sep 17 10:43:39 CEST 2018


Nikos Mavrogiannopoulos commented on a discussion on lib/includes/gnutls/gnutls.h.in:

>  			        unsigned idx,
>  			        gnutls_datum_t * response);
>  
> +/* RAW public key functions (RFC7250) */
> +#ifdef ENABLE_RAWPK
> +int gnutls_certificate_set_rawpk_keypair(gnutls_certificate_credentials_t cred,

The pcert is the structure used for certificate input in all modern functions (pcert is cert-type independent for that reason), and also provides the raw key data to avoid the library doing the re-encoding. The names I think they are useful as one can have virtual hosting even when having raw public keys, right? If we need a convenience macro because that's what you think applications will be using then it could be just that, a macro; however, I'd like to promote consistency here, so that applications can be easily transformed from certs to pubkeys and vice versa.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/650#note_101761017
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180917/0b40e9e5/attachment-0001.html>


More information about the Gnutls-devel mailing list