lsquic icon indicating copy to clipboard operation
lsquic copied to clipboard

Dependencies on common certificates

Open Simewu opened this issue 4 years ago • 0 comments

Hello,

I've been interested in the QUIC protocol documentation, and have specifically been focusing on the security of the digital certificates within each handshake.

I noticed your source code contains four predefined certificates, known as "common certificates":

  • Common cert 2a: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_2a.inc
  • Common cert 2b: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_2b.inc
  • Common cert 3a: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_3a.inc
  • Common cert 3b: https://github.com/litespeedtech/lsquic/blob/master/src/liblsquic/common_cert_set_3b.inc

I was curious about what the functions are of these, and (if these are used), how can I supplement them for external certificates? I understand that http_client has the -C parameter to specify other certificates to use, but I have not had much luck with this.

Using gdb for debugging, I've been able to show that these common certificate files are being loaded, but I don't know if they are being actively used, so I wanted to ask you guys directly.

Any help would be greatly appreciated.

Simewu avatar Jul 06 '21 20:07 Simewu