From b48c194d161b3725d3a9ba3898d0fe78221d9f11 Mon Sep 17 00:00:00 2001 From: 0x676e67 Date: Fri, 7 Feb 2025 13:45:24 +0800 Subject: [PATCH] feat(boring): Add set_verify_cert_store_ref method to SslContextBuilder (#45) --- boring/src/ssl/mod.rs | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/boring/src/ssl/mod.rs b/boring/src/ssl/mod.rs index b49f2c57..e99c6f21 100644 --- a/boring/src/ssl/mod.rs +++ b/boring/src/ssl/mod.rs @@ -1163,6 +1163,19 @@ impl SslContextBuilder { } } + /// Sets a custom certificate store for verifying peer certificates. + #[corresponds(SSL_CTX_set1_verify_cert_store)] + pub fn set_verify_cert_store_ref( + &mut self, + cert_store: &'static X509Store, + ) -> Result<(), ErrorStack> { + unsafe { + cvt(ffi::SSL_CTX_set1_verify_cert_store(self.as_ptr(), cert_store.as_ptr()) as c_int)?; + + Ok(()) + } + } + /// Replaces the context's certificate store. #[corresponds(SSL_CTX_set_cert_store)] pub fn set_cert_store(&mut self, cert_store: X509Store) {