[ANN] tls_certificate_check: TLS/SSL certificate verification for humans

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[ANN] tls_certificate_check: TLS/SSL certificate verification for humans

Guilherme Andrade
Hello list,

I've the pleasure to announce the release of `tls_certificate_check`, a library that packs the boilerplate required for verifying the authenticity of certificates presented by TLS servers against a list of trusted certificate authorities.

It wraps `certifi`[1] and `ssl_verify_fun`[2] together with the code required for verifying certificate chains in non canonical order.

It's simple enough to use:

    Host = "example.com",
    Port = 443,
    TLSOptions = tls_cerificate_check:options(Host),
    ssl:connect(Host, 443, TLSOptions).

You'll no longer need to copy the usual CA validation boilerplate everywhere!



--
Guilherme