esp_https_server: Fixed a PR which adds support for mutual auth in

https_server
Closes https://github.com/espressif/esp-idf/pull/4184
Closes IDFGH-2004
This commit is contained in:
Aditya Patwardhan
2020-02-17 22:59:31 +05:30
parent 559cd57ea6
commit cc0eec52ff
2 changed files with 25 additions and 15 deletions

View File

@@ -41,17 +41,21 @@ struct httpd_ssl_config {
*/
httpd_config_t httpd;
/** CA certificate */
/** CA certificate (here it is treated as server cert)
* Todo: Fix this change in release/v5.0 as it would be a breaking change
* i.e. Rename the nomenclature of variables holding different certs in https_server component as well as example
* 1)The cacert variable should hold the CA which is used to authenticate clients (should inherit current role of client_verify_cert_pem var)
* 2)There should be another variable servercert which whould hold servers own certificate (should inherit current role of cacert var) */
const uint8_t *cacert_pem;
/** CA certificate byte length */
size_t cacert_len;
/** Server certificate */
const uint8_t *servercert_pem;
/** Client verify authority certificate (CA used to sign clients, or client cert itself */
const uint8_t *client_verify_cert_pem;
/** Server certificate byte length */
size_t servercert_len;
/** Client verify authority cert len */
size_t client_verify_cert_len;
/** Private key */
const uint8_t *prvtkey_pem;
@@ -106,10 +110,10 @@ typedef struct httpd_ssl_config httpd_ssl_config_t;
}, \
.cacert_pem = NULL, \
.cacert_len = 0, \
.servercert_pem = NULL, \
.servercert_len = 0, \
.prvtkey_pem = NULL, \
.prvtkey_len = 0, \
.client_verify_cert_pem = NULL, \
.client_verify_cert_len = 0, \
.transport_mode = HTTPD_SSL_TRANSPORT_SECURE, \
.port_secure = 443, \
.port_insecure = 80, \