You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jun 30, 2021. It is now read-only.
As a https server, for better security consideration, user may not keep the private key(for example: named as tls.key) in a clear text. it may use some encryption algo to encrypt the tls.key for protecting from server inbreak.
so when before use tls.key to create a https connection, user first decrypt the tls.key.
2. current implementation
now, in the evhtp_ssl_init(), cfg->privfile is used directly. this means that user should use a unencrypted privfile. user can not use a encrypted privfile.
i'd like add a member callback (for example: decrypt_privfile_cb) in the evhtp_ssl_cfg_t struct. if this callback is set, it will be called to decrypt the privfile and used by SSL_CTX_use_PrivateKey().
@NathanFrench if this feature is welcome, i can make a commit. Thanks in Advance.
The text was updated successfully, but these errors were encountered:
@NathanFrench Please review the commit. any suggestions are welcome.
thank you in advance.
BTW: i have tested the customize_decrpyt_privfile_cb in my machine and it works ok.
1. feature background
As a https server, for better security consideration, user may not keep the private key(for example: named as tls.key) in a clear text. it may use some encryption algo to encrypt the tls.key for protecting from server inbreak.
so when before use
tls.key
to create a https connection, user first decrypt the tls.key.2. current implementation
now, in the
evhtp_ssl_init()
,cfg->privfile
is used directly. this means that user should use a unencrypted privfile. user can not use a encrypted privfile.3. solution
i'd like add a member
callback
(for example: decrypt_privfile_cb) in theevhtp_ssl_cfg_t
struct. if this callback is set, it will be called to decrypt the privfile and used bySSL_CTX_use_PrivateKey()
.@NathanFrench if this feature is welcome, i can make a commit. Thanks in Advance.
The text was updated successfully, but these errors were encountered: