Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

crypto: add cert check to CNNIC Whitelist #1895

Closed
wants to merge 1 commit into from

Commits on Jun 16, 2015

  1. crypto: add cert check to CNNIC Whitelist

    When client connect to the server with certification issued by either
    CNNIC Root CA or CNNIC EV Root CA, check hash of server
    certification in the list of CNNICHashWhitelist.inc. If it's not,
    CERT_REVOKED error returns.
    
    See for details in
    https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/
    Shigeki Ohtsu committed Jun 16, 2015
    Configuration menu
    Copy the full SHA
    ee6334c View commit details
    Browse the repository at this point in the history