diff options
| author | Christian Beier <dontmind@freeshell.org> | 2017-05-14 14:11:36 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-05-14 14:11:36 +0200 |
| commit | edd1acec7c01d668907cbeac003e8754c1b94c2d (patch) | |
| tree | 79ae019b26015d81aa400328dc530d250342ce63 /rfb | |
| parent | 9485359451768fdd50d872fb26d9a7aadb1b58f2 (diff) | |
| parent | 2c87a631fa4f72178876901c87c85d2889bd7b40 (diff) | |
| download | libtdevnc-edd1acec7c01d668907cbeac003e8754c1b94c2d.tar.gz libtdevnc-edd1acec7c01d668907cbeac003e8754c1b94c2d.zip | |
Merge pull request #176 from simonwaterman/x509verify-openssl
X509 certificate verification for OpenSSL
Diffstat (limited to 'rfb')
| -rw-r--r-- | rfb/rfbclient.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/rfb/rfbclient.h b/rfb/rfbclient.h index 72e7a5a..4ac9cd6 100644 --- a/rfb/rfbclient.h +++ b/rfb/rfbclient.h @@ -136,6 +136,7 @@ typedef union _rfbCredential char *x509CACrlFile; char *x509ClientCertFile; char *x509ClientKeyFile; + uint8_t x509CrlVerifyMode; /* Only required for OpenSSL - see meanings below */ } x509Credential; /** Plain (VeNCrypt), MSLogon (UltraVNC) */ struct @@ -148,6 +149,13 @@ typedef union _rfbCredential #define rfbCredentialTypeX509 1 #define rfbCredentialTypeUser 2 +/* When using OpenSSL, CRLs can be included in both the x509CACrlFile and appended + to the x509CACertFile as is common with OpenSSL. When rfbX509CrlVerifyAll is + specified the CRL list must include CRLs for all certificates in the chain */ +#define rfbX509CrlVerifyNone 0 /* No CRL checking is performed */ +#define rfbX509CrlVerifyClient 1 /* Only the leaf server certificate is checked */ +#define rfbX509CrlVerifyAll 2 /* All certificates in the server chain are checked */ + struct _rfbClient; /** |