min
/
boring2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

boring: Add SslConnector no default cert verify paths builder (#16)

This commit is contained in:
0x676e67 2024-12-06 23:01:36 +08:00 committed by GitHub
parent f1c29d439c
commit cbe77fd2ff
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
boring/src/ssl/connector.rs
View File

@ -87,6 +87,18 @@ impl SslConnector {
Ok(SslConnectorBuilder(ctx)) Ok(SslConnectorBuilder(ctx))
} }
/// Creates a new builder for TLS connections with no verification.
///
/// This is useful for testing and other purposes where you want to skip verification.
pub fn no_default_verify_builder(method: SslMethod) -> Result<SslConnectorBuilder, ErrorStack> {
let mut ctx = ctx(ContextType::WithMethod(method))?;
ctx.set_cipher_list(
"DEFAULT:!aNULL:!eNULL:!MD5:!3DES:!DES:!RC4:!IDEA:!SEED:!aDSS:!SRP:!PSK",
)?;
Ok(SslConnectorBuilder(ctx))
}
/// Creates a new builder for TLS connections with raw public key. /// Creates a new builder for TLS connections with raw public key.
#[cfg(feature = "rpk")] #[cfg(feature = "rpk")]
pub fn rpk_builder() -> Result<SslConnectorBuilder, ErrorStack> { pub fn rpk_builder() -> Result<SslConnectorBuilder, ErrorStack> {