Closed
Description
Currently lots of the TLS options are not supported on Darwin - see
Rough instructions of how to implement (thanks @Lukasa)
- Set a verify block using https://developer.apple.com/documentation/security/2976289-sec_protocol_options_set_verify_.
- Create a SecTrust from the data you get there: https://github.com/apple/swift-nio-ssl/blob/7932e709af56d27035084ca918bdd729b4084741/Sources/NIOSSL/SecurityFrameworkCertificateVerification.swift#L47
- Call SecTrustSetAnchorCertificates with the custom roots: https://developer.apple.com/documentation/security/1396098-sectrustsetanchorcertificates
- Call SecTrustSetAnchorCertificatesOnly with anchorCertificatesOnly: true https://developer.apple.com/documentation/security/1399071-sectrustsetanchorcertificatesonl
Metadata
Metadata
Assignees
Labels
No labels