Skip to content

Add support for loading user CA certs from a configurable Windows cert store. #688

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
kareem-wolfssl wants to merge 4 commits into
base: master
Choose a base branch
from
Draft

Add support for loading user CA certs from a configurable Windows cert store. #688

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3cf234a
add TrustedSystemCAKeys sshd option for system CA load
JacobBarthelmeh Sep 12, 2023
935cfb7
add macro guard for system ca certs load
JacobBarthelmeh Sep 26, 2023
e5df6ac
Add support for loading user CA certs from a configurable Windows cer…
kareem-wolfssl Oct 11, 2024
3d6762a
Prefix wolfSSH specific options with wolfSSH_.
kareem-wolfssl Nov 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
add macro guard for system ca certs load
  • Loading branch information
@JacobBarthelmeh @kareem-wolfssl
JacobBarthelmeh authored and kareem-wolfssl committed Nov 15, 2024
commit 935cfb7a00ca8039355ae679085bdbea4115afae
2 changes: 2 additions & 0 deletions apps/wolfsshd/wolfsshd.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -424,6 +424,7 @@ static int SetupCTX(WOLFSSHD_CONFIG* conf, WOLFSSH_CTX** ctx,

#ifdef WOLFSSH_CERTS
/* check if loading in system CA certs */
#ifdef WOLFSSL_SYS_CA_CERTS
if (ret == WS_SUCCESS && wolfSSHD_ConfigGetSystemCA(conf)) {
WOLFSSL_CTX* sslCtx;

Expand Down Expand Up @@ -454,6 +455,7 @@ static int SetupCTX(WOLFSSHD_CONFIG* conf, WOLFSSH_CTX** ctx,
wolfSSL_CTX_free(sslCtx);
}
}
#endif

/* load in CA certs from file set */
if (ret == WS_SUCCESS) {
Expand Down