diff options
| author | eunhhu <[email protected]> | 2026-09-27 08:12:23 +0100 |
|---|---|---|
| committer | eunhhu <[email protected]> | 2026-09-27 08:12:23 +0100 |
| commit | 24a07a0bbfe98924b339f4ffeeaef093e74f73fb (patch) | |
| tree | 44e6cc0052eb8e232ad118b85c05136775855bcc /docs/research/003-live-rules.md | |
| parent | 5d3a7cefa27f3fe20a9c6991fb044815b38aac01 (diff) | |
| download | pure-24a07a0bbfe98924b339f4ffeeaef093e74f73fb.tar.gz pure-24a07a0bbfe98924b339f4ffeeaef093e74f73fb.zip | |
Deliver to https receivers, verifying their certificates (083)
A wire to an https:// URL speaks TLS 1.2 or later through OpenSSL: the
receiver's certificate must chain to the system's CAs (or to the file
--send-ca names) and name its host (SNI and SSL_set1_host, or the IP
address). An untrusted receiver gets nothing: the send stays in the
outbox, the wire logs it and tries again every 10 s. pure-serve now
links libssl and libcrypto.
Diffstat (limited to 'docs/research/003-live-rules.md')
0 files changed, 0 insertions, 0 deletions