Skip to content

Add certificate validation#126

Merged
lulf merged 3 commits intodrogue-iot:mainfrom
mdelete:main
Jan 12, 2026
Merged

Add certificate validation#126
lulf merged 3 commits intodrogue-iot:mainfrom
mdelete:main

Conversation

@mdelete
Copy link
Copy Markdown
Contributor

@mdelete mdelete commented Dec 19, 2025

This aims to add the embedded-tls certificate validation feature in some rudimentary form without breaking the API.

  • Updated some dependencies
  • Compatible with the new embedded-tls pki features:
    • Validates a server certificate chain against a supplied CA
    • Validates the server hostname
    • Authenticates with supplied client certificate and private key (optional)

Caveats:

  • EcdsaSecp256r1Sha256 client cert support only
  • No validity period checking of certificates

For serious and flexible TLS use it would be necessary to supply CipherSuite, Signer, a Random-source, and an optional Time-source to the library. Suggestions welcome!

@mdelete mdelete marked this pull request as ready for review December 19, 2025 14:05
@lulf lulf merged commit 2e82e3c into drogue-iot:main Jan 12, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants