-
Notifications
You must be signed in to change notification settings - Fork 6
Closed as not planned
Labels
developmentStandard developmentStandard developmentr&d:polykey:core activity 4End to End Networking behind Consumer NAT DevicesEnd to End Networking behind Consumer NAT Devices
Description
Specification
We need the ability to provide an alternative certificate if the ed25519 certificate is not supported by the client. We will need this if we want to serve web pages to web browsers.
This may be implemented using the following boring SSL config options.
- https://docs.rs/boring/latest/boring/ssl/struct.SslContextBuilder.html#method.set_verify_algorithm_prefs
- https://docs.rs/boring/latest/boring/ssl/struct.SslContextBuilder.html#method.set_select_certificate_callback
Some other options may be needed. I'll need to look into this more.
Additional context
Tasks
- Determine if it's possible to select server certificate based on client's support for it.
- Implement a method for providing an alternative certificate if
ed25519is not supported.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
developmentStandard developmentStandard developmentr&d:polykey:core activity 4End to End Networking behind Consumer NAT DevicesEnd to End Networking behind Consumer NAT Devices