Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: API to obtain the results of the SSL/TLS negociation #116

Open
informatimago opened this issue Sep 11, 2021 · 0 comments
Open

Comments

@informatimago
Copy link

For some applications, the client code may need information about the SSL/TLS negociation which is normally obtained from or with the TLS context.

Typically may be needed:

  • the server certificate,
  • the server public key,
  • the validation status (client / server, with possibly the CA chain that validated them).

Since drakma uses various implementations for SSL/TLS, it would be nice if it provided an API to obtain the information that is available from the TLS context, notably:

  • get-ssl-peer-certificate (generic function)
  • get-ssl-verify-result (generic function)

(eg. see 11.8 in: https://franz.com/support/documentation/9.0/doc/socket.htm#ssl-1)

This issue is linked to #115

I would suggest to add two opaque objects in the result values of http-request one for the socket information, and one (optional) for this security information, with the reader API to query them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant