| CMakeLists.txt |
|
1051 |
- |
| qtls_schannel.cpp |
@future!:
- Transmitting intermediate certificates
- Look for a way to avoid putting intermediate certificates in the certificate store
- No documentation on how to send the chain
- A stackoverflow question on this from 3 years ago implies schannel only sends intermediate
certificates if it's "in the system or user certificate store".
- https://stackoverflow.com/q/30156584/2493610
- This can be done by users, but we shouldn't add any and all local intermediate
certs to the stores automatically.
- PSK support
- Was added in Windows 10 (it seems), documentation at time of writing is sparse/non-existent.
- Specifically about how to supply credentials when they're requested.
- Or how to recognize that they're requested in the first place.
- Skip certificate verification.
- Check if "PSK-only" is still required to do PSK _at all_ (all-around bad solution).
- Check if SEC_I_INCOMPLETE_CREDENTIALS is still returned for both "missing certificate" and
"missing PSK" when calling InitializeSecurityContext in "performHandshake".
Low priority:
- Possibly make RAII wrappers for SecBuffer (which I commonly create QScopeGuards for)
|
114119 |
- |
| qtls_schannel_p.h |
|
3839 |
- |
| qtlsbackend_schannel_p.h |
|
2074 |
- |
| qtlskey_schannel.cpp |
|
5150 |
- |
| qtlskey_schannel_p.h |
|
1164 |
- |
| qx509_schannel.cpp |
|
8587 |
- |
| qx509_schannel_p.h |
|
1410 |
- |