package tls-mirage

You can search for identifiers within the package.

in-package search v0.2.0

Transport Layer Security purely in OCaml, MirageOS layer

Install

Dune Dependency

github.com Readme Changelog BSD-2-Clause License Edit opam file Versions (7)

Authors

Maintainers

Sources

tls-0.17.5.tbz

sha256=89108857bf3a6f85722925a8d4a3f59c291d638c0f2e2fc45f0fdaf892ae4819

sha512=cd862d74ad20bb419896b50a7fc754b52d4cb29f996e396be216926205f6d7b24dda1cffcd0c81bc3bc2837da53451459a595d5132032fe1460a6776d893eff9

doc/tls-mirage/Tls_mirage/X509/index.html

Module `Tls_mirage.X509`Source

X.509 handling given a key value store and a clock

Parameters

module KV : Mirage_kv.RO

module C : Mirage_clock.PCLOCK

Signature

Source

val authenticator : 
  ?allowed_hashes:Mirage_crypto.Hash.hash list ->
  ?crl:string ->
  KV.t ->
  X509.Authenticator.t Lwt.t

authenticator ~allowed_hashes ~crl store creates an authenticator, using the given certificate authorities in the store as value for key "ca_roots.crt". If allowed_hashes is provided, only these hash algorithms are allowed for signatures of the certificate chain. If crl is provided, the corresponding file is read and used as revocation list (DER encoded). Both options only apply if `CAs is used.