You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When the DTLS connection is negotiated, mbedtls will attempt to verify the certificate. Depending on the setting, the connection will be refused when the certificate fails or a warning will be issued and the connection established anyways.
To support these two scenarios we need to
Expose the verification setting to node js. Specifying this setting should be made mandatory in the API. ( MBEDTLS_SSL_VERIFY_NONE, MBEDTLS_SSL_VERIFY_OPTIONAL and MBEDTLS_SSL_VERIFY_REQUIRED)
Expose an optional callback that can be registered from nodejs for the server to be notified about whether verification has succeeded when set to MBEDTLS_SSL_VERIFY_OPTIONAL.
To verify that the setting works, create test/example programs and associated Keys and Certificates that will demonstrate
Handshake with only keys and MBEDTLS_SSL_VERIFY_NONE.
With MBEDTLS_SSL_VERIFY_OPTIONAL
a. Handshake with successful verification reported by the callback.
b. Handshake with failed verification reported by the callback.
With MBEDTLS_SSL_VERIFY_REQUIRED
a. Successful verification
b. failed verification
The text was updated successfully, but these errors were encountered:
When the DTLS connection is negotiated, mbedtls will attempt to verify the certificate. Depending on the setting, the connection will be refused when the certificate fails or a warning will be issued and the connection established anyways.
To support these two scenarios we need to
Expose the verification setting to node js. Specifying this setting should be made mandatory in the API. (
MBEDTLS_SSL_VERIFY_NONE
,MBEDTLS_SSL_VERIFY_OPTIONAL
andMBEDTLS_SSL_VERIFY_REQUIRED
)Expose an optional callback that can be registered from nodejs for the server to be notified about whether verification has succeeded when set to
MBEDTLS_SSL_VERIFY_OPTIONAL
.To verify that the setting works, create test/example programs and associated Keys and Certificates that will demonstrate
Handshake with only keys and
MBEDTLS_SSL_VERIFY_NONE
.With
MBEDTLS_SSL_VERIFY_OPTIONAL
a. Handshake with successful verification reported by the callback.
b. Handshake with failed verification reported by the callback.
With
MBEDTLS_SSL_VERIFY_REQUIRED
a. Successful verification
b. failed verification
The text was updated successfully, but these errors were encountered: