Lee Clagett a3b0284837 Change SSL certificate file list to OpenSSL builtin load_verify_location ...

Specifying SSL certificates for peer verification does an exact match,
making it a not-so-obvious alias for the fingerprints option. This
changes the checks to OpenSSL which loads concatenated certificate(s)
from a single file and does a certificate-authority (chain of trust)
check instead. There is no drop in security - a compromised exact match
fingerprint has the same worse case failure. There is increased security
in allowing separate long-term CA key and short-term SSL server keys.

This also removes loading of the system-default CA files if a custom
CA file or certificate fingerprint is specified.

2019-04-06 23:47:06 -04:00

..

codefresh

Added Codefresh.yml pipeline

2018-08-08 20:11:04 +03:00

depends

cmake: ARCH_ID fixes for cross compilation

2019-03-05 10:24:14 +00:00

epee

Change SSL certificate file list to OpenSSL builtin load_verify_location

2019-04-06 23:47:06 -04:00

fuzz_testing

fuzz_tests: add a bulletproof fuzz test

2018-09-11 13:38:21 +00:00

gitian

Support docker for gitian builds

2019-02-14 23:14:34 +01:00

rlwrap

contrib: add sync_info to rlwrap command set

2017-08-22 11:40:41 +01:00

snap

Clarification of boolean options in config file

2018-07-18 20:07:05 +02:00

valgrind

easylogging++: faster access to logging

2018-11-27 13:55:21 +00:00

CMakeLists.txt

Update 2019 copyright

2019-03-05 22:05:34 +01:00