-
Notifications
You must be signed in to change notification settings - Fork 1.6k
Open
Description
Dear libwebsockets team,
There is an issues with the wsi client initialisation considering that:
- We are not using CA but cert and key only;
- Cert and key are kept as DER in memory.
Some info about server side of our system had been previously described in issue-3453.
To get the the client working I had to apply these temporary changes in my local copy:
- Skiped the CA related part with
#if 0from line 418 to line 451. The reference code is from theespressifbutmainbranch requires identical changes for us to get the client working. - Replaced the
(long)key_mem_len - 1with(long)key_mem_lenin the SSL_CTX_use_PrivateKey_ASN1() call. As I said before, we have identical DER buffer in memory which is used for both http server test and client test. There was no issues with the http server but client crashed while that function call before I applied the changes. The assumption here is that it maybe required size modification for the buffer in PEM, if so it may have sense to check first if buffer contains PEM or DER and calculate the size based on that.
Can we add some configuration definition or use some other approach to skip the CA for client?
Could you please check if some adjustments have to be applied for key DER memory handling for client? In current implementation it appears that http server and client have different expectations related to buffer size (I'll attach a code example of DER memory init we use with the following message).
Thank you in advance
Metadata
Metadata
Assignees
Labels
No labels