From ed29e82adeea9d2ee89aeadf5646d4d1350a6855 Mon Sep 17 00:00:00 2001 From: Rob Percival Date: Thu, 3 Mar 2016 16:19:23 +0000 Subject: Adds CT validation to SSL connections Disabled by default, but can be enabled by setting the ct_validation_callback on a SSL or SSL_CTX. Reviewed-by: Ben Laurie Reviewed-by: Rich Salz --- test/ssltest.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'test') diff --git a/test/ssltest.c b/test/ssltest.c index b5d44a0..f65358a 100644 --- a/test/ssltest.c +++ b/test/ssltest.c @@ -1586,8 +1586,10 @@ int main(int argc, char *argv[]) if ((!SSL_CTX_load_verify_locations(s_ctx, CAfile, CApath)) || (!SSL_CTX_set_default_verify_paths(s_ctx)) || + (!SSL_CTX_set_default_ctlog_list_file(s_ctx)) || (!SSL_CTX_load_verify_locations(c_ctx, CAfile, CApath)) || - (!SSL_CTX_set_default_verify_paths(c_ctx))) { + (!SSL_CTX_set_default_verify_paths(c_ctx)) || + (!SSL_CTX_set_default_ctlog_list_file(c_ctx))) { /* fprintf(stderr,"SSL_load_verify_locations\n"); */ ERR_print_errors(bio_err); /* goto end; */ -- cgit v1.1