Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS vs self signed certificates problem #904

Open
drawkula opened this issue Apr 22, 2024 · 0 comments
Open

TLS vs self signed certificates problem #904

drawkula opened this issue Apr 22, 2024 · 0 comments

Comments

@drawkula
Copy link

Once upon a time I posted into the mailing list:

I can strip down the HTTPS example in the manual to the bare minimum,
turn it into accessing HTTP, NEX, NNTP and other protocols, add back TLS
to e.g. access NNTPS, but with the average Gemini server I'm biting on
granite.

Not really understanding the error OpenSSL shows, I just assume that it
fails with servers using self signed certificates and succeeds with some
others because they (re)use a (sub)domain they already have registered
with some authority for their HTTPS server.

Similarily they seem to succeed or fail using Ncat to access them
depending on using "-ssl" or "-ssl-verify" to connect.

Is there a way to teach Gambit an additional option for make-tls-context
to do similar?

While trying to produce more examples an answer showed up (body (without quoted parts) only):

The way I use to get around it was to
sed -i -e 's#SSL_VERIFY_PEER#SSL_VERIFY_NONE#g lib/os_io.c

So the remaining parts of the question now boil down to: Can this change be turned into an option of make-tls-context or be switchable at runtime by other means?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant