microsoft/msquic

Using custom CA with TLS certificates

開放

#2,820 建立於 2022年6月14日

 (7 則留言) (0 個反應) (0 位負責人)C (686 個分叉)github user discovery
Area: APITLS: SchannelTLS: quicTLSexternalfeature requestgood first issuehelp wanted

倉庫指標

星標
 (4,764 顆星)
PR 合併指標
 (平均合併 6天) (30 天內合併 40 個 PR)

描述

Describe the feature you'd like supported

Right now TLS certificate verification uses only system CA store. But in some cases custom CA certificates may be prefered (for example, non-HTTP/3 QUIC usage). For this we need to specify custom CA path(es), which should be passed to TLS backend. But MsQuic doesn't support that at this moment.

Proposed solution

Add function or struct field that will pass custom CA path(es) to TLS backend (for example, SSL_CTX_load_verify_locations for OpenSSL).

Additional context

No response

貢獻者指南