Re: [ANN] tls_certificate_check: TLS/SSL certificate verification for humans
Guilherme Andrade <[email protected]>
| Newsgroups | gmane.comp.lang.erlang.general |
|---|---|
| Message-ID | <CAA5f+NXh77+0WGwbWfDUnmDNNajNuO4W0oLXCc06UDQ4DN11og@mail.gmail.com> |
Hello list, `tls_certificate_check 1.9.0` is out! Highlights: - changed partial chain handling to prepare for DST Root CA X3 expiration[*] on September 30 - switched documentation from edoc to ExDoc Links: - Hex package: https://hex.pm/packages/tls_certificate_check/1.9.0 - Documentation: https://hexdocs.pm/tls_certificate_check/1.9.0/ - Source code (GitHub): https://github.com/g-andrade/tls_certificate_check/tree/1.9.0 - Source code (GitLab): https://gitlab.com/g-andrade/tls_certificate_check/-/tree/1.9.0 [*]: https://blog.voltone.net/post/30 On Thu, 21 May 2020 at 02:44, Guilherme Andrade <[email protected]> wrote: > Hello list, > > I've the pleasure to announce the release of `tls_certificate_check`, a > library that packs the boilerplate required for verifying the authenticity > of certificates presented by TLS servers against a list of trusted > certificate authorities. > > It wraps `certifi`[1] and `ssl_verify_fun`[2] together with the code > required for verifying certificate chains in non canonical order. > > It's simple enough to use: > > Host = "example.com", > Port = 443, > TLSOptions = tls_cerificate_check:options(Host), > ssl:connect(Host, 443, TLSOptions). > > You'll no longer need to copy the usual CA validation boilerplate > everywhere! > > * Hex package: https://hex.pm/packages/tls_certificate_check/1.0.0 > * Documentation: https://hexdocs.pm/tls_certificate_check/1.0.0/ > * Source code (GitHub): > https://github.com/g-andrade/tls_certificate_check/tree/1.0.0 > * Source code (GitLab): > https://gitlab.com/g-andrade/tls_certificate_check/-/tree/1.0.0 > > [1]: https://github.com/certifi/erlang-certifi > [2]: https://github.com/deadtrickster/ssl_verify_fun.erl > > -- > Guilherme >