Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set cacertfile in tls ctx #251

Merged
merged 6 commits into from
Dec 21, 2023

Conversation

qzhuyan
Copy link
Collaborator

@qzhuyan qzhuyan commented Dec 20, 2023

fix #250

This is new feature in msquic 2.2.

Before this change certificate (chain) validation was done in the callback (quicer) , now it is done in TLS.

  • The old method is wrapped with QUICER_USE_TRUSTED_STORE
    We used to have trusted store cache in listener to speed up handshakes.
  • more tweaks for macOS to make it work

@coveralls
Copy link

coveralls commented Dec 20, 2023

Pull Request Test Coverage Report for Build 7280780192

  • 11 of 14 (78.57%) changed or added relevant lines in 3 files are covered.
  • 1 unchanged line in 1 file lost coverage.
  • Overall coverage increased (+0.5%) to 83.609%

Changes Missing Coverage Covered Lines Changed/Added Lines %
c_src/quicer_nif.c 0 3 0.0%
Files with Coverage Reduction New Missed Lines %
src/quicer.erl 1 89.25%
Totals Coverage Status
Change from base Build 7259841701: 0.5%
Covered Lines: 3494
Relevant Lines: 4179

💛 - Coveralls

@qzhuyan qzhuyan marked this pull request as ready for review December 20, 2023 19:42
ieQu1
ieQu1 previously approved these changes Dec 20, 2023
thalesmg
thalesmg previously approved these changes Dec 20, 2023
c_src/quicer_listener.c Outdated Show resolved Hide resolved
c_src/quicer_ctx.h Outdated Show resolved Hide resolved
uses: coverallsapp/github-action@v2
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
flag-name: run-c-lcov-feature
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just curiosity: is this flag defined somewhere in the codebase? I didn't find it. 🙈

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a name, let coverall knows it is different subtask or parallel job

@qzhuyan qzhuyan dismissed stale reviews from thalesmg and ieQu1 via 3c1d892 December 20, 2023 21:06
@qzhuyan qzhuyan force-pushed the dev/william/cacertfile-in-tls-ctx branch from c0af21f to 3c1d892 Compare December 20, 2023 21:06
@qzhuyan qzhuyan merged commit 917fdd5 into emqx:main Dec 21, 2023
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

msquic 2.2 ca certificate file setting in SSL_CTX
4 participants