Skip to content

Commit

Permalink
Complete re-write of easytls-verify.sh
Browse files Browse the repository at this point in the history
The script now uses the generic_metadata_file to compare states:

If these files exist then:
1. Move generic md file to extended md file and process metadata
   Read metadata into g_* variables
2. If generic md file does not exist and extended md file does exist
   then this must be a renegotiation
3. If there are no generic md files then assume --tls-auth/crypt(v1)
All of these always succeed.

The client X509 serial named md file is then processed:
1. Move client md file to extended md file and process metadata
   Read metadata into c_* variables
2. If client md file does not exist and extended md file does exist
   then this must be a renegotiation or --tls-auth/crypt(v1)
   This is resolved here.
3. Finish processing
Some of these are designed to fail.

Currently, this cannot identify a client which floats but
it does allow floating to occur, which it probably should not.

Signed-off-by: Richard T Bonhomme <[email protected]>
  • Loading branch information
TinCanTech committed Jun 15, 2021
1 parent 1900d40 commit 3df16cf
Showing 1 changed file with 275 additions and 95 deletions.
Loading

0 comments on commit 3df16cf

Please sign in to comment.