Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dtlstransport: Add ExtendedMasterSecret, ClientCAs, RootCAs, ClientAuth #2495

Merged
merged 1 commit into from
Jun 2, 2023

Conversation

SimonVerkada
Copy link
Contributor

Description

These changes add the following options to the SettingsEngine, in order to allow connections to verify certificates:

  • disableInsecureSkipVerify: disables the insecure skip verify flag for DTLS.
  • extendedMasterSecret: sets the extended master secret type for DTLS.
  • clientAuth: sets the client auth type for DTLS.
  • clientCAs: sets the client CA certificate pool for DTLS certificate verification.
  • rootCAs: sets the root CA certificate pool for DTLS certificate verification.

Reference issue

None

@Sean-Der
Copy link
Member

Sean-Der commented Jun 2, 2023

@SimonVerkada LGTM! When CI passes I will merge and tag

@Sean-Der
Copy link
Member

Sean-Der commented Jun 2, 2023

If you are interested in getting involved with Pion would love to have you involved. Also any feedback about what we could improve? Thank you!

@codecov
Copy link

codecov bot commented Jun 2, 2023

Codecov Report

Patch coverage: 18.75% and project coverage change: -0.11 ⚠️

Comparison is base (2ffab96) 77.75% compared to head (5234db6) 77.65%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #2495      +/-   ##
==========================================
- Coverage   77.75%   77.65%   -0.11%     
==========================================
  Files          87       87              
  Lines        9324     9340      +16     
==========================================
+ Hits         7250     7253       +3     
- Misses       1645     1657      +12     
- Partials      429      430       +1     
Flag Coverage Δ
go 79.42% <18.75%> (-0.12%) ⬇️
wasm 70.15% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
settingengine.go 51.92% <0.00%> (-5.53%) ⬇️
dtlstransport.go 63.58% <50.00%> (-0.25%) ⬇️

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@Sean-Der Sean-Der merged commit a0e9824 into pion:master Jun 2, 2023
17 of 18 checks passed
@SimonVerkada SimonVerkada deleted the simon/dtlstransport-ca branch June 2, 2023 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants