RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 12:37:45 +00:00
Code Issues Activity Actions

LibTLS: Add references to RFC5246 for the verify procedure

Browse source
This commit is contained in:
Michiel Visser 2022-02-22 13:48:52 +01:00 • committed by Ali Mohammad Pur
parent d78813d902
commit 331092d25a
3 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Userland/Libraries/LibTLS/TLSv12.cpp
View file

@ -233,6 +233,12 @@ bool Context::verify_chain(StringView host) const
return false;
}
// RFC5246 section 7.4.2: The sender's certificate MUST come first in the list. Each following certificate
// MUST directly certify the one preceding it. Because certificate validation requires that root keys be
// distributed independently, the self-signed certificate that specifies the root certificate authority MAY be
// omitted from the chain, under the assumption that the remote end must already possess it in order to validate
// it in any case.
if (!host.is_empty()) {
auto first_certificate = local_chain->first();
auto subject_matches = certificate_subject_matches_host(first_certificate, host);